Security has two aspects: Objective security - things like do not open mongodb server with default passwords to internet etc. which are definitely bad. Subjec

Security has two aspects: Objective security - things like do not open mongodb server with default passwords to internet etc. which are definitely bad. Subjective security - blogs and consultants saying something is bad and do not have objectivity to back it. It may not be a bad things, ugly sure, but it would need lot of context. It could be bananas, ugly etc. but may not bit a big deal. Sure things, go wrong white remote editing. Did I bring a server down, you could do the same while VI thinking it UAT but it turns out to prod or rm a mount. Are millions of orgs doing this day-in day-out? yep.