Pre-release versions usually does not contain any security measures, even though they have no servers, if you decide to include your own servers, you need to either add security client-side or server-side.

To report a vulnerability, either contact me personally, or open an issue.
Please do not report vulnerabilities for pre-release versions, check here.