Raspberry Pi has poor security by default. I've been a sysadmin for 20 years and I'm pretty paranoid when it comes to system security. If you open ports to the Internet, use your Pi as