yes, most airlines will let you retrieve your or someone else’s booking details by just knowing the PNR and name

but you’re correct, security is an important matter to manage. That’s why I’ll be adding user authentication in chat.