You can turn off the remote login. It's encouraged as the default, but not necessary. Even the local login, from a device on the network, can be set up to requ

You can turn off the remote login. It's encouraged as the default, but not necessary. Even the local login, from a device on the network, can be set up to require two-factor auth. That alone makes it more secure than a lot of consumer-grade stuff which only requires a password, which is often never changed from the default. I'm happy with my Unifi Dream Machine as a one-device home network. I thought about getting rid of it a while back when some bad press about Unifi security was published, but it turns out it was fake news and Brian Krebs has lost all credibility in my eyes for continuing to promote it even after it was debunked.