Sure, depending on the implementation, there can be considerable overhead. So, it's generally more intended for the occasional use of some non-advertised service by a few initiated people...

I think it will be very hard to run a regular public service, without at the same time opening up your resources to misuse of some kind, even if it's "only" bad folks clogging up your network bandwidth by sending tons of packets that get rejected at the firewall level...