Security is a matter of layers, like an onion, it's not just an either-or. Any sensible database or database-like software does not come with authentication di

Security is a matter of layers, like an onion, it's not just an either-or. Any sensible database or database-like software does not come with authentication disabled by default. Yes, your DB should be behind a firewall, but if RedHat installed out of the box without a root password you wouldn't say "well your server should be behind a firewall anyway."