Not really bad if you use a power-only cable. If the data pins aren’t even wired up, can’t move anything other than power.
Not sure if that works with USB-C at anything other than legacy 500mA power draw though, probably not since the device can’t communicate for what it supports.
A power only USB-C cable is a violation of USB spec, has to be USB 2.0 at the least.
If your device has good software, it will only allow power unless you authorize a data connection.
* Assuming there is no bug, zero-day, or other vulnerability on the current version of your fully updated device.
Having a power-only cable removes that as a possibility.
Still gotta worry about stuff that could send a ton of current to fry the ports too. USB condoms can help here too but your own power adapter is best.
Now if only usb cables were labeled like Ethernet cables.
It amazes me how given the complexity of the USB specifications, where everything looks the same but it is not the same, nothing is ever labeled.
Some things are but the labelling is stupid and tiny. Many laptop ports are labeled but people aren’t familiar with the icons (and the icons are often confusingly similar)