Don&#x27;t trust them. Add a system you control between the device and your internal network. If you&#x27;re just worried about your traffic privacy and not just internal resources, establish an end-to-end encrypted tunnel from that jump system to a network or VPN provider you trust.<p>Edit: excuse me, I misread your question. I thought you were asking for best practice. I don&#x27;t have have a specific hardware recommendation (because I don&#x27;t trust them :) )