This is a small check on validity of a request and will not protect completely. But it won't hurt either.
In order to allow referrers you know, you can use allowed_referrers
If you continuously get “Access denied” when using phpList, you will want to switch this off.