I'd suggest blocking all incoming traffic except a VPN. It's not that hard to set up a VPN. Even better if the high-risk devices like cameras are on a separate

I'd suggest blocking all incoming traffic except a VPN. It's not that hard to set up a VPN. Even better if the high-risk devices like cameras are on a separate VLAN from critical stuff.