Is Mongodb on Private service secure if I dont add authenticated user

I mean I dont add user directly connect to it via webservice is there any harm in it since when I tried adding user and tried connecting using user and password Connection fails on node app

Private services are inaccessible from the public internet and can only be accessed by other Render services running in the same user account or team.