Why should Spring Boot Actuator endpoints never be exposed publicly without protection?

Several actuator endpoints (like /env, /heapdump, /configprops) can reveal sensitive configuration, secrets, or memory contents, and /shutdown can let anyone terminate the application. Actuator should generally run on a separate internal management port, restricted to internal networks, and/or explicitly secured with its own authentication rules distinct from the main application's endpoints.