Or not, maybe their best potential customers should continue to get burned publicly in incidents that have a direct line to their poor decisions.
In conjunction with this, prudence would dictate that you enable authentication as well. In this case, it seems that reliance was placed on Docker to maintain iptables settings to disallow connections from untrusted IPs and that iptables setting was reset.
As always, defense in depth is a good strategy; authentication in addition to firewall rules would have prevented this.
Edit: they/(you || your employer). I know it gets tedious, but calling out your conflicts of interest can save everyone a lot of time.
Sorry about your prior experience. I think early versions assumed a systems knowledge that was at odds with the idea that anyone could just start using a database without any prior database knowledge.