If the device is behind firewall and VPN, short of back door, is it still a security concern?