> They are supposed to not be directly routeable to/from the public internet. They can be directly routable between non-public parts of the internet. Sure, but

> They are supposed to not be directly routeable to/from the public internet. They can be directly routable between non-public parts of the internet. Sure, but this is different from a VPN. This would be untrusted code downloaded from a remote website talking to unrelated devices on my local network. Effectively, it would be the remote website having free reign inside my local network, with my web browser acting as a proxy (or as a trojan horse, with a bit of exaggeration).