I'm not so sure. You can certainly attach a debugger to any running process. But that's not what parent was suggesting. He was saying anyone could attach a REPL. That's a totally different animal.
It's your own dumb fault if you expose the web-console or similar on production.
It's your own dumb fault if you expose the web-console or similar on production.