Everything has a risk, but not all risks are equal. You seem to be saying "no point in closing or even locking the door, just leave everything wide open and put up a sign saying 'please do not enter'; it's the same, as everything has a risk." Is the difference in risk clearer now?

As for the example, SSH (or most other remote access solutions) has much more secure modes of operations than MySQL (or any other database) - which shouldn't really be surprising. One of these products is a database (where security is just an afterthought), whereas the other is a tool for secure remote access (where security is the main goal; unless you're the type of user who's blindly clicking "yes yes yes agree yes agree sure yes yes," it's very hard to break SSH).

If you insist on deploying insecure systems, that's mostly your problem; please don't advise others to do likewise (as you're actively causing harm by this).