Your car analogy fails because safety is highly regulated by the government, and the manufacturer can be sued for their failings. When it comes to server secur

Your car analogy fails because safety is highly regulated by the government, and the manufacturer can be sued for their failings. When it comes to server security, you are responsible, and should never make assumptions. If you don't know how, or simply can't be bothered to check, then you shouldn't be administering a server. Also a firewall is a most basic requirement, even something simple like UFW would do.