Not sure I fully understand the context of the question, but for a device to gain access it needs to be allowed into the local network by being in wifi range or

Not sure I fully understand the context of the question, but for a device to gain access it needs to be allowed into the local network by being in wifi range or authorised on the VPN, plus have username/password access to the service/data. If, however, there's a backdoor I don't know about, then I'm pwned.