those hacking concerns are just as valid inside as well as outside the firewall.

You can enforce physical isolation to make sure hacking isn’t possible at least without some level of physical intrusion