IIUC it doesn't have any listening sockets open on WAN by default at least?
root@OpenWrt2:~# ss -Qlnt4 'src 0.0.0.0'
State Local Address:Port Peer Address:Port
LISTEN 0.0.0.0:443 0.0.0.0:*
LISTEN 0.0.0.0:80 0.0.0.0:*
LISTEN 0.0.0.0:22 0.0.0.0:*