Configuring your Kubernetes Network policy ingress from public IPs address for port '3306' can allow anonymous/malicious outside traffic to connect to SQL specific workloads running inside your cluster.
To ensure outside malicious traffic is not allowed to connect to SQL specific workload inside your Kubernetes cluster, then configure your Kubernetes Network policy for port '3306' to allow from pods internally.