I’d put it behind a closed firewall with logging enabled. Your home router might be able to do this even. Then you can see if it’s trying to connect to the Internet beyond NTP without you clicking “update”.
Then you should do exactly that before it has the opportunity to download an “improved” firmware. Maybe create a DHCP reservation and matching firewall rule before connecting it to the home network. Good luck!
I’d put it behind a closed firewall with logging enabled. Your home router might be able to do this even. Then you can see if it’s trying to connect to the Internet beyond NTP without you clicking “update”.
I have a pi-hole. And my asus router can probably close all outbound traffic. I also think USB printing is fine tbh. I don’t need AirPrint.
Then you should do exactly that before it has the opportunity to download an “improved” firmware. Maybe create a DHCP reservation and matching firewall rule before connecting it to the home network. Good luck!