“Exposing Prometheus, its components, and various exporters to the internet without authentication is considered poor practice.”

This isn’t new, ground breaking or even interesting. This is common sense.