It is very common for a customer to peer with an MPLS PE router via BGP and announce routes. Really depends on how you are going to build the VRFs. Are you going to be concerned only with public transit or will you be providing private transit as well?
I’m interested in both options, private and public transit. This is just for labbing currently, to get a better understanding of the technologies. I guess ideally I’d like to build a full ISP style network, that can provide Public, Private, and L2 style connections to customers.
In that case, I would probably build a VRF for the Internet (or put it in the main table) and then build one or more VRFs for private transit and then hand those off to the customer on two separate ports on the equip at the customer prem or via dot1q tags if needed.
Vrf is always an easy way to control who speaks to whom, which may be easier than using a lot of firewall rules to shield your router loopbacks from customers.
But then, a lot of networks do both management and Internet routing in the global routing domain and protect management with acls.