I disagree. I see nothing wrong with having a samba server on the WWW. Just dont publicise it and dont log on to an admin account over the internet without a VPN. (in the off chance that someone sniffs your password). I know many schools do this, (mine does with AFP)