I'm not really sure what people are up to with stuff like this.

Ripping things out of the XML add-on package does not prevent anything from being done by direct access to the Hijack web server addresses.

Hijack has built-in HTTP authentication, which when enabled in config.ini can restrict general access to playlists/streaming only.

There are no on-player search functions available from any web interface yet, but I believe someone posted about a PC-based database browser/search tool that could select tunes for streaming from the Hijack web interface.

Cheers