Security question for PE-CE and Internet

[webstd.design]

Actual diagram looks like this and it's without Internet: <SiteA CE>--<PE>--(MAN/VPLS)--<PE>--<SiteB CE>

Proposed to use on SiteB dedicated PC - Internet

Proposed scheme:

<SiteA CE>--<PE>--(MAN/VPLS)--<PE>--<SiteB CE>

                                                                |___Internet___PС

Should additional security/dmz be configured on SiteB CE in this case?

Thank you

[webstd.design]

Internet PC and SiteB CE will be separated by VLAN on ISP PE

[webstd.design]

any comments please? please ask if some more info should be clarified

[webstd.design]

Any suggestion please on this? Please ask if any questions...