Am I reading this wrong or does this almost open up any server bound to localhost to the outside? I think proxy_pass will forward traffic even when the root an

Am I reading this wrong or does this almost open up any server bound to localhost to the outside? I think proxy_pass will forward traffic even when the root and try_files directives fail because the junction/symlink don't exist? And "listen 80" binds on all interfaces doesn't it, not just on localhost? Is this clever? Sure. But this is also the thing you forget about in 6 months and then when you install any app that has a localhost web management interface (like syncthing) you've accidentally exposed your entire computer including your ssh keys to the internet.