But even being a "harmless" functionality, could be used to exploit your WAN.

I share the same paranoid, no way to connect something like that into my network.