It's always been turtles all the way down.

You either use a purpose built device with limited attack vectors, or something far more general.