It is fine to expose Rust to the internet. We do so at my company. The python api at our company is more worrysome than the rust-written api.