What's the most overlooked security risk in a self-hosted Bitcoin or Lightning setup that is already fully updated?

The system itself, both the software on it and the configuration of it. openssh, bash, linux kernel, poor system passwords, leaked keys, poor local network security.

Also: poor wallet passwords.