I think you have to go into desktop mode to find the setting to disable shader pre-caching but it’s 100% better with it disabled!

You can. I recommend making sure you have logging in place so you know what’s going on. This could include not just service logs but firewall logs as well. You might want to rate limit the connection attempts for SSH and WireGuard and consider Fail2Ban or something similar.