For a long time, the default install had it binding to all interfaces and with authentication disabled.