I wouldn't say that's a "Marketing person" failure mode, there's enough open buckets, public mongodb or Elastic instances with wrong credentials.