Personally, I reckon that applies at least as much (if not more) to the devs installing random software packages onto internet connected and un-firewalled serve

Personally, I reckon that applies at least as much (if not more) to the devs installing random software packages onto internet connected and un-firewalled servers - as it does to database developers who document clearly that their software is not intended and is actively unsafe to install on directly internet connected servers... Cave ne recipiens donum...