… And what about put all of this shit behind a secure front end before connecting to anything?

You are probably right on this regard, sometimes some regulations can have a big impact on how things function. However, do we really need to have the thing itself exposed to the internet? Can we not have a better architecture to have the same thing, but safe? The technology is there, is just a matter of doing it right