TLDR on that is basically people deployed them to VPS's with bad security models because they're not system admins and have no clue what they're doing.