[bitlad]

Security has two aspects:

Objective security - things like do not open mongodb server with default passwords to internet etc. which are definitely bad.

Subjective security - blogs and consultants saying something is bad and do not have objectivity to back it. It may not be a bad things, ugly sure, but it would need lot of context.

It could be bananas, ugly etc. but may not bit a big deal. Sure things, go wrong white remote editing. Did I bring a server down, you could do the same while VI thinking it UAT but it turns out to prod or rm a mount.

Are millions of orgs doing this day-in day-out? yep.