The problem is when you expose your server to the entire internet. It only takes a few minutes for the bots to find you.
I mean, sure, but the existence of bots doesn't immediately guarantee that a given service will be compromised; simply take precautions to ensure that the exposed services are secure, that the rest of the network, and the device itself are adequately protected, etc.