Meteor Club has published a nice MeteorJS Security Checklist.