Read-only by default
Importing history only requires read access to orders and executions. Trading, transfers and withdrawals are unnecessary.
Use a dedicated key
Create a dedicated analytics key, restrict IP addresses when possible and review active connections regularly.