When you add Database in Sites=> Database menu, there is Remote Access IPs field (separate by , and leave blank for any)
I don't like that access to mysql server is enabled by default from anywhere. Want to explicitly allow all accessing IPs . And i also need webserver to have allowed access to DB by default (my clients will never know what to fill into that field)
There is no default access from everywhere. This field is used in combination with the remote access checkbox only, so the ddefault is that databases can be accessed from localhost only and not from everywhere.