Yeah I could see it being left like this for an hour or so while someone finds out what the actual security configurations are supposed to be, during which time it wouldn't have any data in it. But to leave it like this for any period of time is ridiculous and to release it like this is criminal.