see comments from tkaiser on cnx - it seems it uses a bsp (not LTS) 5.10 kernel with lots of vulnerabilities https://forum.radxa.com/t/lack-of-concern-for-security-in-bsp-kernel/12210?u=tkaiser so please remember this when buying/using it as your gw/vpn