Overall thought it looks like from my limited knowledge and how I am translating this is that the go to rule is to secure your bridge ports by binding to 127.0.0.1. Not sure if that would impact the function of netmaker.