Yeah, I’ve seen a few systems get poked at. Just keep the firmware up to date, use a strong, unique password, and if you can, put the irrigation controller on a separate network. It’s simple but effective. If you want, I can help set it up.