You'd really have to think about that, I'd personally reject it just on defense in depth grounds. SSH over WireGuard is probably the correct solution.