There are a couple things that are public. Nothing that’s not containerized in an LXC. SSH is only available with VPN. I once locked myself out after not being at home as we had a blabkout, I found no way in after two days and had to get there physically. I think I’m fine.