Cockpit port 9090

I'm on Slowroll, and I tried to install cockpit.=0A=
=0A=
If I got it right, it opens, by default, the port 9090 by adding =0A=
the cockpit service to the public zone.=0A=
=0A=
I may be wrong, but I think this is an ill-advised default, and it should b=
e, by default, =0A=
accessible only from localhost:=0A=
less proficient users are not supposed to need remote administration, while=
=0A=
experienced users can open the port if they deem it necessary and safe enou=
gh. =0A=
At the very least, there should be a prominent warning.=0A=
Assuming that whatever LAN one may end up connecting to is secure =0A=
(e.g. while traveling with a laptop and connecting to the wifi of a hotel)=
=0A=
doesn't sound right to me.=0A=