This is why in my setup I only install or use things that also work as usual (manual usual) when the control system is unreachable, but when it is reachable the thing is automated.

Along with blocking all external traffic unless there’s a specific reason for temporarily allowing said traffic.