>let's not immediately jump to conclusions.

I did no such thing. Everything I pointed out is the truth. The README is incomplete (being diplomatic) and lots of people have port forwarding turned on for various reasons making boxes publicly available.

I question the dev's priorities and judgement if authentication wasn't the first thing on the list before putting it out there.

>It is what it is

you're correct, it's a poorly thought out application that allows for remote control of people's computers.