Passwords:
-> You want to have immediat access to them, even if your house burns down

Notes:
-> You want to be able to read the documentation how to fix your selfhosted service, even when your selfhosted services are down

Public Reverse proxy:
-> A reverse proxy is only as safe as the applications behind. And NO, most selfhosted-applications are not hardened or had security audits
(reverse proxy with a forward authentication proxy is something different)