It doesn't need to be public-facing. The point is not to be able to continue playing as if the game was still being supported, it's to be able to continue playing at all, in some way. You can set up a box at home and let two or three of your friends in through a VPN. Security is not a concern.