Yeah running solo you still need a hostname if anyone else is to reasonably use it, without resorting to vpns, private dns and/or other complexity.
And the default deployment of Lemmy is still publicly viewable without login so you’re still posting everything for the world to see. Security by obscurity is no security at all. As has been said a million times. Same naturally goes for privacy.