pgAdmin exposure review starts with whether server mode is in use

Explain why a pgAdmin fingerprint is only a lead and how server mode, login controls, shared servers, and database credential handling change risk.