I'm not sure how to control access (I guess sessions or when we provide OAuth (#12) ) but it would be nice if people could access their lists via RSS (particularly in the absence of jsonp (#10)).