One Year of becoming a Telnet server

For a package with that kind of install base, is there a tradeoff? Fewer ancient holes like this for their hackers but wide open access to anyone who installs codex or claude code?