Startups of the last decade were routinely doing this. Building their fresh ideas on the newfangled databse without bothering to investigste how to secure it in any way against malicious actors.