While this is bad, it only affects those who intentionally left their firewall open to the outside world. Any half-decent software engineer knows to firewall the database server, no matter the vendor.
The way to avoid this, wouldn't have been firewalls, but using another database