Filtering by IP is not enough for security. Imagine, Rostelecom, largest Russian ISP, few times misconfigured their network equipment, so ~90% of European traf

Filtering by IP is not enough for security. Imagine, Rostelecom, largest Russian ISP, few times misconfigured their network equipment, so ~90% of European traffic went throw Russian channels. So they seen all unencrypted files, logins/passwords, emails, phones, bank accounts, etc. They always said, "this is just mistake", but we cannot be sure, if all these information was not sold on black market. You have not suffer from scammers? This is just question of how strong your encryption and how much time passed. SSH tunneling, if properly configured, is strong enough, so nobody could decrypt your data in nearest years. To be strict, considering current state of cryptography science/tech, one need hundreds years of CPU time to decrypt data, but we cannot be sure, nearest years will not uncover mistakes or will not appear some new equipment, like quantum computers, so hundreds years could shrink to few weeks of medium size DC.