What prevents unauthorized agents from even connecting to a network?

Each hApp can now run its own bootstrap server and authentication endpoint.

That means you control who joins at the protocol level, not just the application layer.