Right now all of the security of DreamObjects relies on the key pairs and the user. Only those with access to your keys and DreamHost panel login can make any changes to users, buckets, objects or permissions. We also do not yet provide any encryption of data on our servers so the user is responsible for doing so before uploading to DreamObjects.
You’re right in that we’re definitely lacking information regarding security on the site. I’ll make sure we add some information. Thanks for bringing it up!