There are several reasons why one should not directly expose a Node.js process to the web and should instead hide it behind a reverse proxy.