It does feel like they are running their user credentials and other "critical" stuff in MongoDB. I wouldn't advice that.

Am I wrong? Curious.