Systemd’s RestrictAddressFamilies directive can limit an intruder’s privilege and thus their ability to launch attacks on your devices.

Read More at Enable Sysadmin