Yep, I have a decently powerful home server that's always on, but still run a cheap VPS for directly public services like my sites. I don't think it's particularly likely that the home server would get hacked if updates were to br kept up with, but why risk it for that little money?