For me, it’s as much about ease of use as much as it is about minimizing attack surface area.

Also the lifetime I need the connection open. For something quick, ssh tunnel. For something normies use, reverse proxy. Ain’t trying to teach my parents about IP addresses and port numbers.