Yes and changing it is not easy. In particular securing it on AWS has reached totally preposterous levels. I am a Pro Architect Cert holder and I am routinely baffled by the docs there.
Their developers should take as much heat as the guys who left that data in the open, then, in my opinion.