I would really like to see the database servers have remote access off by default until the user explicitly enables it. Furthermore it'd be great if I could enable it only for specific IP addresses. This seems to be a very common practice in the hosting world.
How did this discussion end up? I think it's honestly a really important feature. MS Azure certainly has this feature, as does my very very inexpensive webhost.