I currently develop a big blog website with Firebase as my backend just for information. Right now (not released/published the page yet), I give my authors accounts special rights to access pages others can't access (I protect them via a middleware). On those, they can publish or edit posts that will appear on the page.
I thought this may have security risks. Would it be more secure to give them a local piece of software that does all that the author panel does now? That way no one except the authors could access it. Is this additional security step even useful and are there any other ways to enhance the security?