I upgraded to Deco mesh (2 nodes) about a year ago. They perform well, but the settings have been dumbed down quite a bit. I'm using them as APs and have a smal

I upgraded to Deco mesh (2 nodes) about a year ago. They perform well, but the settings have been dumbed down quite a bit. I'm using them as APs and have a small box running pfSense connected to my cable modem. The Deco AP should be unreachable from the Internet but still have full access to the Internet. In theory no black hat should be able to access them from the Internet but they could call out and ask for commands if they are so programmed.