Why are there people running anything publicly accessible? If you are running on the cloud, there is no need for any VMs to have any public IPs at all. Excepti

Why are there people running anything publicly accessible? If you are running on the cloud, there is no need for any VMs to have any public IPs at all. Exception for your Bastion host, and even that should be restricted to known networks. All incoming traffic needs a layer of indirection. On cloud providers that's usually their load balancers.