If your public-facing site is secure, yes. The staging and production sites share technology, including security functions and staging servers if you set up your sites properly. Having one site properly secured means both are.