Git can be cloned via HTTP and it's so easy to set up that people have accidentally done it. There are loads of web shops that accidentally disclosed source code by way of having their Git deploy repo in their Apache webroot. You could literally "git clone http://poorsuckersblog.com/" and get everything.