Like I said, people doing self hosting, they often open up ports for those services and management ports.

Some routers have backdoors built in, such as the Fortinet NGFW backdoor, that can also be exploited.

I work in this industry and believe me the risk is real, no vpns aren’t a silver bullet, but there are a few good providers out there that can help mitigate some risks of using P2P for more than piracy.