The new security option is designed to thwart prompt-injection attacks that aim to steal your confidential data.
No VPN or exposing ports necessary.