Comment by lazide

No it doesn’t? They can do all these things just fine over a LAN connection (assuming it routes externally).

If you can firewall your LAN - you can also firewall your WiFi.