since elasticsearch is just running locally, the surface area for attacks is greatly minimized. it'll be the same as running a local postgres/anydb instance