The local wallet in the node is accessible by simply taking out the SSD and mounting it on another system, or making a copy of the LND subdirectory for an attack later. Physical access makes an attack easy for a determined attacker, not even hacking skills needed. A hardware wallet, being a separate address, for which the spending keys are held in cold storage, is entirely separate.  


I would think it is safe enough keeping only enough on the node wallet for lightning channels, etc., isolating the network for the raspberry pi and physically concealing it, and if possible housing it in a lockable box with wire access holes.

I use VLANs to separate things on my network, the full node is on a VLAN by itself and it can't reach anything else or vice versa.

Hiding it and creating a separate WiFi network for the Airbnb guests would be a good way to mitigate risk

Is is possible, I recommend to hide it somewhere where no one would come for your airbnb. I beleive that to access the Umbrel instance they would need the ssh or web password but they can still install malware if there is physical access

If someone comes to my house and plugs in directly to the raspberry pi, is it possible to hack or access the local wallet or install malware?  Or does hardware wallet redundancy negate risk here?  I’m setting up a node, but may airbnb my house.  What are the risks Im not thinking of?

Is a physical node an attack vector?