Also, any battery powered device will not record you for very long, so they are not doing that. It’s all the mics in the tv that are the real issue.

I have knockd listening on one very high port number, and only after accessing that reverse proxy whitelists the source ip. Sure some scanners might do a full port scan and try http only after that, but FQDN is required too. Plus I have geo ip list blocking all but my country. Oh and Crowdsec. So far so good…