Securing connect rest endpoints

Can the connect rest endpoints be secured (basic auth / oauth)?

Yes, see HTTP Basic Auth - Connect REST API

You can also configure it for TLS