The problem with the Docker default is that they did have a firewall configured but Docker will reconfigure it. That said, some external firewall would prevent

The problem with the Docker default is that they did have a firewall configured but Docker will reconfigure it. That said, some external firewall would prevent this. My VPS provider allows me to configure which ports I want to expose to the outside world which would mitigate this kind of issue.