Forum Moderators: goodroi
Is this right or not?
No its not right because if security is an issue then you should not publish content without requiring proper user authentication (via password or otherwise).
robots.txt exclusion was meant to be used to prevent robots indexing useless data, rather than excluding robots from content that is useful.