What other programs are exposed to the network on the device? Knowing only SSH, you may want to confirm whether CVE-2018-10933 is unpatched on that distro.
The device isn't specifically exposed to the internet (it's behind DHCP and I didn't forward ports to it). It does have a IPv6 address, but Google WiFi blocks all incoming IPv6 connections by default.
We're a place where coders share, stay up-to-date and grow their careers.
We strive for transparency and don't collect excess data.