@bouncepaw my guess is because the protocol doesn't have encryption and has a history of exploits. https://book.hacktricks.xyz/network-services-pentesting/pentesting-finger for example.