Thank you both for your replies.
@Mike I’ll take your advice and lock down the device. I’ll remove the device from having outbound access (even if it is time/date update). I only access my network through VPN and connect locally, however I can see the device does have web access through dhcp to...