content: If you're actively managing your firewall, and you don't rely on "autoconfig," then it doesn't. That said, the attack vector remains a concern, because these devices reach out to retrieve configs, and often maintain active connections to cloud services to get around SPI and other demarcation methods. At the end of the day, these things are a menace no matter what you do, by their very design.