TLDR on that is basically people deployed them to VPS's with bad security models because they're not system admins and have no clue what they're doing.
Same instinct: know what you're running and where. Sandbox first, then deploy to something you understand - skill integrity before scale.