[jszymborski]

Maybe the service is provided over SSH via e.g. port-forwarding (or is simply "SSH access to a server").

[SahAssar]

Sure, but are L7 attacks easier than L4 against those servers? Adding more layers/software has a cost in configuration, maintenance, attack-surface, etc.