Yes, that is true, but all of them are built on top of their cloud integration which is optional. If you did not utilize their cloud integration and disable remote administration (it's off by default), you are basically equally at risk as any other "Linux" box on the Internet based on the versions of software running on the device.