You can delete requests and buckets on demand.
Some of our customers are running it in production apps but for the most part you turn it on to solve a problem then turn it off when you're done. Down the road we'll be making production use more useful with the security concerns you mention at the forefront.
