Why is changing an admin listener from 0.0.0.0 to 127.0.0.1 a security improvement?
0.0.0.0
127.0.0.1
It limits connections to the local host instead of listening on all network interfaces.
It moves the service to a randomly selected private port.
It automatically encrypts all HTTP traffic with TLS.
It prevents every client, including local clients, from reaching the service.