How true this is. In the 90's, at least one commercial Unix vendor shipped their systems with X11 open to the world (equivalent of "xhost +", full remote access, no security.) In the days of no firewalls, that was a fun time.