all systems have their weak spots
its finding them before someone else does patching them, locking them out.
but they didnt setup their system right they let it all out in the open, like why would you let all your data be shown out of public root dir?