There is a site collection on my farm that is accessible outside of our network but does not allow anonymous access. Presently, we are experiencing some permissions issues where users need access to folders or libraries inside of the site without needing permission to the root sites themselves. Of course, due to Limited-access user permission lockdown mode, this does not work as nicely as it could. Turning this feature off should allow for the permissions to work as intended.
With that in mind, my question is: What are the security implications of having a site collection available on the internet and the permission lockdown mode deactivated? Do I need to worry about it if I do not allow anonymous access to my sites?