The Umbrel box apparently makes a call to their server every hour, revealing its IP. Pretty awful behavior from a “sovereign” box.