Yeah local network prevents that, or the tailscale option (which idk behind the scenes if someone really tried I guess they could get in?) Isn’t easy though just to casually do this