Provider Hosted Add In Web Site Authentication Best Practice

A question for the community.

When developing provider hosted add ins which are deployed to azure app service are people securing them with the app service authentication feature?

This aspect seems to be missing from a lot of the documentation?

thanks in advance