I think it’s pretty well known this many years into production that the WF hubs are 2.4 GHz wifi only, and also rather well known that many people (including me) have asked for both 5 GHz ‘and’ wired ethernet since the earliest days of the betas for the usual network stability and performance reasons.
I personally didn’t worry much about the security wide of the hub using wifi, but the fact that the Hub requires/sets up a persistent connection with the WF servers in itself might be a concern to some, but it’s all well established+known this many years into their production that WF assumes internet connectivity to their servers (as does Ecowitt). Most folks who worry that would have a VLAN’d network at home to deal with that kind of concern.
FWIW - I stuck with my VP2 for a variety of reasons including it working without any Internet connection at all. I purchased the serial dataloger on mine when I purchased it (cough) 12-1/2 years ago. It’s nice having the device work without any LAN even.