It’s basically a big internet accessible hard drive. So anyone with the username and password just types the address of the ftp into any browser and logs in to it for access. If they left it ‘open’ or poorly secured, it’s not too difficult to look at all of the files stored there.