Can I restrict to only allowing secure access?

Yes, you can force your account to use SSL.

Go to the settings area

You'll have to be the account owner to access the settings area.

Click Account Details

Check Force SSL

Click update. Once you've submitted the form, everyone who accesses your account will now use SSL.