First, Winston helps prevent hacking of your home network. See this article about how Winston supplements a Firewall for more details.
Second, Winston prevents DNS rebinding by intercepting all unencrypted DNS requests on your home network and re-routing them to Cloudflare. This prevents the most common method of attack on connected devices. Here’s an article about this vulnerability that you might find useful: https://www.bleepingcomputer.com/news/security/half-a-billion-iot-devices-vulnerable-to-dns-rebinding-attacks/