Remote enabling of remote desktop script

I saw a discussion or article that was posted here about a script that could remotely enable remote desktop. Does that still require password protection to access the desktop? If not, does this not mean that it is a security hole?