On this page

Safety Guidelines

We strongly recommend the following Confluence configuration settings to avoid potential security risks:

Make sure people are not allowed to register their own accounts, especially without restriction to your domain.

If you allow anonymous access, make sure anonymous users don't have permission to create or edit anything anywhere (pages, blogposts, comments, attachments etc. in any space).
     
If you configure your instance differently, you do so at your own risk.