Not at all. There could be some new vulnerabilities in MySQL that make even password-protected databases vulnerable.

As for us, we give access via an SSH tunnel, which requires public keys from certain IPs.