this is pretty nonsense for a small or home server. it isn't that hard to make something essentially completely bulletproof over a small surface area

the issues mainly come from sprawling enterprise infrastructure, running thousands of random endpoints across software nobody cared to write carefully