If a (web) user knows or guesses the name of a view, he/she can read the complete content of the view as XML using ?readviewentries.
Directly opening a view can be easily prevented using e.g. $$ViewTemplateDefault.
I know you can use url redirection, but those are server-settings, usually not available ...
how often do you need the full yadayada when using the ?readviewentries?
it would be nice to be able to specify the option that you want the output without the timestamp, position, toplevelentries ... info