Mac A has BTMM enabled. Also enabled is the ability to access via apple id. In order to enable this it was necessary to provide the apple id and password. When I access Mac A from Mac B and select the via apple id option, I am asked for the apple id but I am NOT required to provide a password.
This seems very insecure since anyone who knows/guesses my apple id could acces Mac A via BTMM.