Come on, dozens of servers have a public IP and we're using a whitelist. What could possibly go wrong?
Seriously though, what happened last time happened because I fucked up a setting that disabled the checking of valid accounts. That setting has since then been enabled so theoretically it shouldn't be able to happen again.