[sanityvampire]

Allowing unauthenticated access is the default configuration, but I think you have to go out of your way to make it accessible from external systems, let alone by anyone on the open internet...

[sb8244]

Can you elaborate further?

My thought process is deploying this on digital ocean would make it insecure by default.

[aidos]

It binds to localhost by default (now, didn't used to which caused all the issues in the past).

https://docs.mongodb.com/manual/reference/configuration-opti...