Exposing any of the Arr stack to the internet is just bad practice in general IMO but bad actors will always be out there so it's even more of a reason to practice good security.

I used huntarr for a minute and found it utterly useless. Didn't trigger searches like it said it was doing. Uninstalled it after about 5 minutes.