If all you want to do is view, you can make smarttiles read only, there is a config setting just for that. So that even in the highly unlikely event someone else gets your URL they can’t control anything. Further more there is a setting to change your token in smarttiles, you can change it every week if you like.
Finally, if all of this is still not secure enough there is Home Automation Dashboard and switchBoard.