1. if the device has a name -> always assume it is vulnerable 2. hope you disabled upnp, the device doesn't have NAT hole punching, and doesn't "require" inter

1. if the device has a name -> always assume it is vulnerable 2. hope you disabled upnp, the device doesn't have NAT hole punching, and doesn't "require" internet access for some reason like... cloud backup of logs or update checks 3. configuring firewalls and routers is hard. but plugging devices into power is easy. people always go the easy route.