A lot of this is correct if you're renting servers or something like that, but what a lot of people in those subs seem to end up doing is renting their storage via services like Storj or Sia, their GPUs to services like NiceHash, and so on. Users don't visit their network directly, user data is small parts of files (encrypted), there's no need for public IPs, etc. The risks are much smaller.