>not putting something like cPanel behind a VPN or SSH reverse proxy is on the same level as not wearing a seatbelt

Exactly. It's astonishing at the amount of crap that has absolutely no business being directly connected to the Internet but shouldn't be.

Convenience or security - it's either/or not a yes/yes.