basically: you can go ahead and use the
option to enable remoting on a public network but it'll only work if your client is on the same subnet unless you
also broaden the firewall rule which leaves you a bit more exposed (but probably not much more than a password-auth ssh server)