Leaving debug APi open is nothing to do with SDN
Seems like a bit of a beat up. If you leave your debug API open to the world you can expect everyone to come take a look. Nothing about SDN says you have to make debug APIs globally accessible just like nothing about BGP says you have to peer with everyone.