As, surprisingly, did so many other databases and operating systems. VAX/VMS was "FIELD/SERVICE" on all new systems for many years.Then all these systems got connected to DECNet/BITNET, etc and all heck broke loose. No real excuse for anybody to have ever configured their systems this way.

And it's probably the main reason MongoDB is a thing at all.

When I learnt Mongo, that was literally the first thing I had to lookup because the docs didn't explain it, or even mention it was insecure.

But once it was set up it gives you a login, and I realized it was completely public, anyone could just login there. It's a horrible default to have, but it's weird more people didn't realise how insecure it was.