Are exposed IP addresses a security risk when integrating multiplayer with steam

You could push the data through a reverse proxy server. Though the implementation would probably depend based on the back-end tech