Yes you can send open, close or click to the topic /IN/STATE
Open and close are preferred since they implement logic to make sure nothing happens if you send open and the door is already open.
Username and password isn’t hard to add but the use case I envisioned at least was generally a private broker (like a pi) on the local network where you are already protected by the Wifi security. Are you thinking of using it with a public broker?