Running Samba exposed to a public network isn't the only issue here. Even on an internal network, this would allow file/directory permissions to be bypassed.