There seem to be a lot of people concerned about outbound packets from the KVM devices. Maybe under Cloud Access there could be a few more modes:
Enabled: Current behavior.
Cloud Disabled: Current behavior
Local Network: The LED process pings the gateway instead of an Internet server, still representing network connectivity but not Internet connectivity. NTP is still necessary (obeying DHCP NTP settings or whatever changes are configured manually if the user has a local NTP server). This would eliminate the pings to public DNS servers (which handle trillions of REQUESTS per day so this isn't even noise, and pings are likely handled by distributed AnyCast routers rather than DNS servers anyway).
Minimal Outbound Packets: Only NTP packets are sent , but the LED state is simply solid when an IP address is assigned and blinking when an IP address is not assigned. Software updates here should be on-demand only (a change to the Upgrade Firmware modal to allow for a manual check should be added no matter which mode is selected). I think the device should still work, NTP being needed to support TLS encryption but no reachouts to STUN servers or Internet connectivity.
Of course, any other issues people have had can be incorporated here as well but I know DNS pings and STUN IP checks are commonly found in the forums. And a help page explaining the points above could be added to the device's web server.