[fhke]

All cloud providers provide public APIs for managing infrastructure, how is kubernetes any different?

Your viewpoint operates on the assumption that a private network provides additional security in comparison to the public internet, which is a very dangerous assumption to make.