May I ask what do you guys have exposed to the internet?
I personally just have a wireguard VPN (single UDP port open) and everything is accessible through an internal reverse proxy. I just never felt the need to expose nothing ant least not web related.
Honestly is not a big deal. Some specific instance might start behaving like aholes because of corporate greed or anything else.
All they can do is take their specific communities down. The affected communities can always move to other instance (that is easier than changing to a different system all together).
Changing platforms will always be harder than just switch instance because you instance changed the rules on you.