If you connect it to any network at all. Is it beyond the NSA to string together several obscure vulnerabilities to attack a specific target? [1]

I mean.. I suppose you could air gap your database, but of what utility is it to you now?

[1]: https://en.wikipedia.org/wiki/Stuxnet