Major Description
Kudu should by default not accept unauthenticated connections from publicly routable IPs, even if authentication and encryption are not configured. An unsafe flag should be provided to enable unauthenticated connections from publicly routable IPs, with appropriately scary verbiage and a link to https://krebsonsecurity.com/2017/01/extortionists-wipe-thousands-of-databases-victims-who-pay-up-get-stiffed/.