content: You could restrict it to your phone's approximate IP range.  I had my VNC hacked before (some exploit, there was a secure password on it) because I had turned off my VNC firewall rule for too long.  (had it restricted to my work IP usually)