How do you know? There needs to be some kind of connection for remote programmability. The default choice is likely something connected to the (W)LAN. From there, it's only one misconfigured firewall and a default password away from being hacked over the internet.