It did in the old days of the "Insecure API port" which listened on 8080/TCP, but that's been gone a while now. Whilst it usually was just bound to localhost,

It did in the old days of the "Insecure API port" which listened on 8080/TCP, but that's been gone a while now. Whilst it usually was just bound to localhost, I did encounter a distribution that, by default, bound it to the container network, meaning that anyone with access to one pod, got to be cluster admin! Generally speaking though I don't think any distributions do that now.