The security expert in me is terrified at the concept of remote access that, far too often, isn't actually managed very well. I've been to far too many places that have management interfaces like this and either don't know it, or don't apply updates.

It's not that remote access is bad, it's that all the remote access I've seen has been horrible. Hash disclosure is just seen as "meh, that's the way it is", and being able to login without a password is standard unless the IT has taken the time to update something they often don't even know about.