yep

In my opinion it’s the best solution because there’s a really low attack surface plus it makes it easy to control which device has access to which services.