For something like Sentry that's typically not a huge problem. Only the "receive errors from application" endpoints needs to be public; everything else can be

For something like Sentry that's typically not a huge problem. Only the "receive errors from application" endpoints needs to be public; everything else can be gated behind a VPN or HTTP password or whatever. While it's certainly true that such an endpoint can have security problems, it's a pretty small surface area. Besides, what kind of interesting stuff is there in Sentry? When configured correctly, probably not too much, depending on what type of app you're using it with.