Nethserver + OpenVPN + IAX Asterisk

IAX2 as far as i can rembember could be “ok” for Wan connections, should be also encrypted.
Therefore: why not use directly public ip address of Asterisk?