That's legitimate concern -- you can of course put an Nginx proxy in front of elasticsearch to deny DELETE requests (see eg. http://www.elasticsearch.org/tutorials/2012/03/21/deploying-...)

But wait for an article at the http://elasticsearch.org blog with an example of a more sophisticated, Ruby-based proxy.)