Is there any easy way to guard against this without putting everything in a VPC?