I agree, I’m a bit of a different case since I’m also colocating my equipment. I run a UDM Pro for all my IPMI with a VPN into that subnet, but everything else is running with public IPs.