For all those who are concerned about leaking your TORwallet URL, we have now implemented an optional password feature. Once set the password will be required to send coins from the wallet.