okay, I agree with you on that one.
Nevertheless I do think a VPN connection is good option in this case (a better option than opening a port to your internal network).
To illustrate my point:
Quick GRC port scan of my connection, ran them all, no indication of anything present.
(And yes, I do know this is not 100%)