So you unlock you wallet (your wallet will be locked within a certain amounts of minutes again), and give people access to it by opening up the RPC port to the public (explicitly setting the rpc server to listen on your external interface)? What do you think will happen?

I have heard 2 people in the entire ethereum community, shift and exp talk about this. Will not go into a discussion about this, maybe my co-workers will, but i will not. Seriously, its like leaving your wallet on the street then be surprised if money is gone when you walk back a little later. You must actively perform all this steps for this even being remotely possible. This is not in any way a default behaviour of ethereum nor shift as code base.

Regards
Joey