You're absolutely correct, allowing the world to access my Windows PC would be worse in almost all circumstances. I use the Windows firewall to restrict access to the blue iris webserver then OpenVPN on a separate box to access the home network. The OpenVPN server also has firewall rules on it...