Not all browser based applications are, or need to be exposed to the entire Internet.
If you do want to do that, you obviously need to think about who can access what, but since Datomic provides a HTTP based API, you can use any suitable HTTP based technique to achieve that.