Question about rcpallowip in .conf file

[Mieljean]

Hey there people
New to the forum, hoping to get out of this newbie state soon

But, I have a question;

In the conf. file there's a line rcpallowip=......
if you set it to 127.0.0.1 it only allows your own pc to connect, 198.168.*.* only LAN pcs, and I assume if you use the line
rcpallowip=*
A pc could connect over the interwebs.
What are the dangers of letting anyone connect to my own pc?
Is it a bad idea to start with, do I need to keep my username/password secret to make sure no-one can connect, or won't anyone be able to mess around anyways?

I hope someone can answer this for me, not touching it until I know about the safety features ^^

Have a good one 

[bukaj]

Anyone who knows your login and password and is in rpcallow range, can control your client remotely. It is as simple as that. I would not advise to allow anyone besides 127.0.0.1 to control your client unless you really know what your doing. If you have to use such config, at least encrypt your wallet.