Either way if I had to open one of these I'd come up with a decent plan for it, I don't really want any obvious attack surface appearing so obviously limit the amount of applications running on the server, have battle tested and secure default software on the server, and autistically maintain the server like a real server janny