Modern VPN solutions allow for full IP roaming. Nothing to maintain really. I see what these guys are trying to get at - its essentially how I run distributed

Modern VPN solutions allow for full IP roaming. Nothing to maintain really. I see what these guys are trying to get at - its essentially how I run distributed services for my small business, but having a VPN in front of those is still a more secure option. VPN should not mean the keys to the kingdom and should indeed be restricted to a subset of explicitly exposed services.