Even easier: just don't connect it to your network. Everything connected to my network runs free software that I control. If you absolutely must have something on your local network then have it in a VLAN that has no internet access and can't access your main LAN.