What version of the database will be used by the server application loaded onto an end user's workstation?
MSDE version of SQL2000, with SP3A, runs on the client end or on a local server that the client can connect to via ODBC. This is secured by the end users local network security.
Our server uses SQL2000 with SP3A, no database port is exposed to the outside world. Any port scan of our server would show only port 80 is exposed.