Hacker News Reader

Oh but this doesn't actually disable remote access on the UDM side, does it? It's just a flag that the cloud host can choose to respect?

You need to go to the settings for the UDM/UDMP itself, not the network controller, and disable remote access there. It's a bit hidden.