But why do they need to be in the open internet? Can't they be put in a VPN?