Exactly!

If you need external access, use an external access infrastructure that’s designed for that purpose, with controls and monitoring.