It's like the old days of social engineering people to setup an .rhosts file with a wild card entry so you didn't need a login to get into the machine. You'd think people would learn host-based authentication (especially alone) isn't really good, but of course why would they learn? They never do.