Seeing how many MongoDB instances were running wide open to the internet despite calls to not do so, your concern is certainly valid.