Seriously - do you really need endpoints directly exposed to the outside world for the sake of efficiency or convenience?
Do you really require your data immediately accessible to external users?
GET YOUR SHIT OFF THE INTERNET!
Defense in depth, mother ducker! Segmentation and security controls - love them and implement them!