I meant via webhook triggers as those don't require auth:

https://www.home-assistant.io/docs/automation/trigger/#webho...

I guess you'd still want a proxy or firewall so not sure it ends up being much less complex, but it should be doable.