Reminds me mongodb being open/unprotected by default, that turned out well...