One public IP can front several controllers, and each controller can manage many fridges. Exposure alone does not prove compromise.