The whole point is, there are IT admins and devs that are useless.
The lack of hardening of the MongoDB sais it all about the IT team.
The fact that they were saving recordings in WAV says it all about the devs, really, what a bunch of useless morons.
I would fire the entire dev/IT team if I were in charge of that toy outfit, I would name and shame the guyz on the Internet, never to find a job in IT again.
MongoDB could have provided idiot-proof defaults, then again, MongoDB have decided NOT to cater for idiots, that is their call.
Log files is good, RTFM is much, much better ...
The good news in all this, we get to:
1. Know about data slurped by toy manufacturers being stored in the cloud .... for no obvious technical reason. The masses will probably react at some point ....
2. Have a new company to add to our CV-scanner's blacklist