Also, do not plug any Internet-facing devices into it, have a captive SBC that connects to a LAN server hosting (legally owned) videos.