I’ve always had concerns about exposing MongoDB ObjectID to users.

Is it safe?