Since I couldn't flash my own OS in to the BMC components, where I work those ports and the 'combo' bmc+normal ports are not used on public facing networks.

A BMC really should be just a fully open minicomputer. Ideally there'd be a slot for something like a Raspberry PI to be used as an add-on BMC card.