Probably best to not leave any ZFS system connected to the internet then.

Or perhaps this illustrates the value of running all web services under KVM rather than bare metal.