This was really informative. Is there a way to find out how different manufacturers have enabled (or left disabled) such functionality? Would love to know the potential pitfalls before messing around with something like this.

Of course, one thing you could do is have the AutoPi locked down to only reply to a certain IP, VPN connection, etc, but the underlying security issues once connected, remain.