So basically he messed up something basic and he is passing the blame to the tool he used? I would fell much more sympathetic if he acknowledged his mistakes instead of flexing muscles and throwing Docker/MongoDB under the bus.
The clear mistake here is allowing incoming traffic on 0.0.0.0/32
Disclaimer: I am not into Docker or Mongodb