i'm not really hahah... i've just thrown it on it's own subnet in my LAN and it talks to nothing but the nets and itself. I have little snitch going and I make sure it doesn't ping or talk to anything but the API servers and relays I approve. Other than that... not much really. Going to read the docs on security practices today I think now 😅