My Ebang miners are behind a stateful firewall, I only allow from the inside to the outside the connections needed for the pool of my choice. From outside you can not get in. Management is through a VPN tunnel. They can put whatever in these miners they want, I just drop these connections.