Elasticsearch is still this way, and actually tries to make you pay for Shield, their way of securing it.