For various reasons we are finding it increasingly difficult to work with remote workers. We are a very small developer shop and it's becoming impractical to do manual merges on a daily basis. So we're left with little choice (?) but to consider opening up our SVN servers.

I'm looking into the following:

1. Full HTTPS session
2. Running non-80 port
3. Strong password policy

Is this enough to prevent someone hacking and stealing data?

I will also look into VPN but first would like to understand any alternative solutions.