lol -- the issue is that even if it is just a dev server, unless I host it locally on a VM under my desk, it will be on a publicly-facing IP on the internet internet, so i'm curious as to what precautions you take with your XF installations using webdav.
Public facing DEV servers should be secured behind passwords, and with production sites not in debug mode you should be reasonably secure for admindav.php