I think it is alright to use it.. its just to share the work in progress so it doesnt matter if it is vulnerable

I've already seen PHPMyAdmin login and tokens pass by, so I don't think it's only used for showing progress but also to have a reverse tunnel back home..

the slogan is "expose yourself to the world"

Once you let the public use it, there are certain expectations. That's like saying that an unfinished nightclub doesn't need fire safety because it's a work in progress. That's not acceptable if you're still letting people in to dance.