Is UPnP chromecast a necessary security measure?

A very slight improvement is to put it on its own network and switch to that network on whatever device is interacting with it temporarily. That's easier to do when turning on a Radio service stream from phone or casting a YouTube watch later playlist, than it is choosing songs or YouTube videos one by one.

Here's a couple related links as references:

There is some discussion here of being able to use it without UPnP Chromecast (at the bottom): https://nakedsecurity.sophos.com/2019/01/04/dont-fall-victim-to-the-chromecast-hackers-heres-what-to-do/ With the famous attack playing PewDiePie, it is unclear whether disabling UPnP solves the issue (further links in article): The two said that disabling Universal Plug and Play (UPnP) should fix the problem, but this has been disputed by experts. There is also a problem with location privacy from 2018, don't know if its fixed: https://bgr.com/2018/06/19/chromecast-and-google-home-location-vulnerability-fix/ To me it would be best if a user could control it from another (guest) network. This suggest not possible, but discusses some details: https://www.reddit.com/r/Chromecast/comments/250pa0/should_it_be_possible_to_cast_from_a_different/ And Google's reply confirming No: Cast to a device on a different network. - Chromecast Help Discussion of attempts to run on different VLANs: https://community.ui.com/questions/Chromecast-across-VLANs/5cf91d86-91d5-4d05-a832-0cc8226f26c2 Chromecast across VLAN - Super User