When you own it you can just limit it into vpn-ed company users, that significantly cuts down on the area that can be hit