OCI & Private network

I am new to OCI and have the below questions:-

I understand the best practice is to provision your database in private network. We need to use APEX and hence we need to configure a load balancer to access apex from this database. My question is how are we avoiding security risks when we have a load balancer in a public network to access the database?

Thanks & Regards