Even after the log4j disaster, security of minecraft seems weak.. just searched by open source intelligence(criminalip.io) there were over 50 vulnerable mincraft servers, It seems possible to penetrate from outside to inside. They need attentions.