I would be even more worried about DNS/domain hijacking if the HN stories I hear are true. Not only technical issues but social engineering of the domain ownership.
Whatever you do (custom domain or not), you're always exposed.
Whatever you do (custom domain or not), you're always exposed.
And of course you're always exposed, I'm not sure why you'd mention that. It's no reason to just give up and do nothing.