Unfortunately, trying to secure your hardware is a lesson in frustration and ruins the whole experience. This is because every device acts confused, hangs or p

Unfortunately, trying to secure your hardware is a lesson in frustration and ruins the whole experience. This is because every device acts confused, hangs or produces cryptic errors when facing denied access; restricted resources prevent you from understanding why the access was denied and how to open it; changes in network topology lead to problems that only stumbled over much later; and it's extremelly hostile on guests who spend half a hour trying to configure. It's untractable. Most of user crypto has same set of problems btw.