Is Mongodb on Private service secure if I dont add authenticated user

1

I mean I dont add user directly connect to it via webservice is there any harm in it since when I tried adding user and tried connecting using user and password Connection fails on node app

2

Private services are inaccessible from the public internet and can only be accessed by other Render services running in the same user account or team.