Remote access via WebDAV is comparable in security to user password-based VPN access. The only difference is the increased attack surface of WebDAV due to the open port 443. The best way to provide additional protection for any type of Web connection is to require client certificates along with password authentication.