alt Hacker NewsThe only way to make something bulletproof is to get rid of it's network cards, or take so much out of it, it's nearly useless.
The recent Windows and Linux kernel exploits should at least give you some idea on how good these models are at exploiting stuff.
Computers can't have their zero days exploited if all packets coming from unauthenticated clients are dropped. I believe the future is wireguard on everything.
Don't let your computers talk to strangers. If it must, then do it from inside an isolated environment based on actual hardware virtualization with no shared kernels. If these models break through the hardware hypervisor, it means the entire industry is in deep shit, not just you personally.