1. Good engineers should have had a firewall/waf/nat/thingy infront of their linux systems, and alerting at least on those directly exposed to reduce/eliminate blast radius
    2. Good engineers don't enable MTCP (which as far as I can tell is largely a desktop feature) on firewalls
    3. ???
    4. Profit!