Adding an alphanumeric password to the equation makes bruteforcing into WhatsApp accounts a lot more difficult for threat ...
No VPN or exposing ports necessary.