[hw]

Production database access must always be locked down from external traffic, and only allow traffic from the production application or within the production environment.

Aside from mitigating local dev accidentally pointing to the prod db, if you have the db accessible externally means it’s susceptible to network attacks and password attacks