More people are using VPN services for privacy without realising this exposes SSH/SMB/Web services. To combat this problem we have added simple firewall configurations for Home/Public networks; the Home configuration blocks inbound connections from non-private networks, e.g. traffic from the Internet to the public IP address used with the VPN connection
Ok, I admit it, I'm on of those people not realising I could be exposing services when using a VPN service! 
Could you elaborate on this a bit, please? Does this apply to all VPN services? I've tried googling for this but haven't found anything relevant so far.
For example, I'm using an OpenVPN add-on on LE 8 connecting to a PIA server to get around some government filtering. How can I confirm if I'm exposing services doing this?