This is what I expected the article to be about. I would wager a lot of shops don't to the whitelisting. If they wanted to be really intense they could do authenticated origin pulls.
Seems to work great when you use something like a GUID, and no need for IP whitelisting.