@kenny113 @molly0xfff @usul I'd guess that the problem is more that you loose a lot of your readers if RSS is the only form of subscription you offer.
Feed token seems good enough for that purpose. Most probably also work with basic auth but I'm not sure that's really better in any way.