Pretty easy to do it. See this thread.
Completely local so @JasonJoel if you block it for everything other than lan and ntp it isn’t a security issue.