Wi-Fi can be intercepted and hacked somehow without physical access...
Is point #10:
If you DON'T know how to work around something security, assume there's definitely someone who does.
To access some of the main machines, you have to physically go there, or you have to use the fiber optic cable I rent between the office and the data center.
Of course, if the secret services come and intercept the cable, etc...
These are my recommendations, everyone can do as they wish.
Oddly enough, there are some RouterOS machines on my network and a few "forgotten" ports left open... on purpose...
A word to the wise.
As others have written,
it's easier to spot a mistake if the hacker is wasting time with something virtual and completely useless...
Like finding the password to a useless account, or hacking a virtual machine that... is useless...
@holvoetn
The advice to keep the admin account active anyway, turned out to be useful because whether the account exists or not, whether it is active or not, previously gave milliseconds of different response in which you could guess whether that account existed or not, active or not...