If it's not accessible from the internet, and there's nothing especially sensitive on it, the maintenance becomes less of an issue. ie, you don't need quite as good security if you don't put your server on the internet. I'm not going to say there are no security concerns, but they could be mitigated pretty well by setting up a DMZ, or just otherwise protecting it from your other LAN clients.