“Mongodb authentication is disabled by default”. Hmm. “New houses come without locks by default”. Seems just as wise. http://docs.mongodb.org/manual/core/access-control/