CUPS / IPP is just an HTTP server. Apparently HTTPS (IPPS) is reasonably well-supported, and there is also support for IPP authentication, but I still wouldn't feel totally comfortable exposing the CUPS built-in web server directly to the public internet....