I also don't understand this: Everyone with the right domain can ssh-in the vm?

Edit: Answered below, thank you.