Shodan still shows a shitload of these devices directly connected to the public internet, so attackers can hit them without needing to bounce through anything else first. Some of them are connected to cellular networks, so there's no level of local network security policy that'll save them. A whole bunch of poor decisions bringing us to this place.