> Unfortunately there are thousands of publicly available instances of Werkzeug out there and each and every one of them should take proper mitigation actions as if they have already been exploited.

This should probably say "publicly available instances of the Werkzeug debugger". Werkzeug without the debugger is perfectly safe AFAIK.