They almost certainly have in house legal teams and those lawyers are salaried.

I don’t get why people leave interfaces the public doesn’t need access to open to the public – especially SSH.

Use a VPN if you need access to those interfaces from the “outside”. They’re stupidly easy to set up these days, particularly with Wireguard.