@Kris CloudAccess is probably the only hosting company to nag for so long about K2. K2 allows public comments by default. This is to allow new users to see all available features in K2. It's why we don't hide images or tags or any other feature in K2 by default. From that to the point where a site is left wide open to spam comments, well, this has nothing to do with K2. It only has to do with users who have no idea how comments work and don't care to secure their site. And if a user sees all these spam comments yet they don't care about them, who are we to blame them. Furthermore, lots of users use prebuilt Joomla packages from template clubs. All these leave comments enabled. And they would even if we didn't.

All in all your claim is like blaming Joomla for a hacked site because the owner of that site had "admin" for their super user password.