The database is not available directly from the internet, its port is not exposed to the internet and it is only available on the server’s localhost. To connect from the outside requires an SSH connection with private key authentication.  

We can customize this on an on-premise or dedicated cloud server installation.