@stefano And while not relying on internal monitoring make sure your external monitoring doesn't share anything with the monitored systems:

Different ISP, different cloud provider if in the cloud, no shared infra at any level