Most of the people doing this are on a LAN with a commodity firewall (modem/router combo) I think their security posture mainly stems from being isolated in th

Most of the people doing this are on a LAN with a commodity firewall (modem/router combo) I think their security posture mainly stems from being isolated in this way. I've seen enough questionable suggestions like disabling the host firewall/SELinux that I doubt there are many layers to their security onion. To be fair, I do rely on the network gateway too. It's pretty much all on my LAN, on a separate VLAN. Additionally... most of my services are on a 'mesh' style VPN called Nebula. This lets the things I really need to access outside of home work while not being quite as exposed.