CMS12: Disallow access to CMS UI and Util on front servers (prem) for real.

Hi.

Having followed the instructions on https://docs.developers.optimizely.com/content-management-system/docs/decoupled-setup I still have some issues.

1. Util (login UI) is still accessable. And I am getting some routing errors at initialization when I set an absolute url to different host.
2. Logging in is possible;
3. If you somehow could figure out the RootPath (I used a guid for this), CMS UI is not reachable (due to the access restrictions set as per the article mentioned earlier) but addons and Find still accessable.
   1. Could I just remove the _Protected folder under modules or do I have to cherry-pick removal of certain folders; such as Find, Visitorgroups and other Add-ons I might have added

Could I remove the login all together?