Port 27017 and 1,676,736 Matches: Databases That Answer Before Anyone Authenticates

1,676,736 services answer on the MongoDB default port. Why an open database is found by scanning rather than targeting, and the controls that close the exposure class rather than one instance.