I’ve done the risk/benefit analysis.
No way does anybody get a hold of my data, but me.
We just did a pen test for a company who has everything local. We gained full admin access to their entire network and all their data.