You could set up a DMZ if you're concerned. But even if someone gets on my LAN, it's not the end of the world. They could send goatse to my Chromecast, I guess.