They could add a login form if they don't want their website to be publicly accessible.