Developer Originated SDN?

How would you handle a situation when a developer can open up a point-to-point tunnel between their Kubernetes hosted application and node on the internet inclusive to a public cloud resource? OpenFaaS project founder Alex Ellis created such an application called Inlets. I sat down with him for a one-on-one. How do I an old school firewall guy view this SDN-lite solution in the hands of developers? Or am I looking at it from the wrong perspective and the solution is actually for operators.