That was my guess too - significant lower attack surface.

I am thinking about a VPN setup myself but most of my services are public facing anyway...