> it requires exposing a port to the internet or using some SSH port forwarding tool

I think what they meant is that the SSH server can be behind your webserver and not have to have its own public IP exposed directly... but of course there are an abundance of proxy-related solutions already.