Comment by Brian_K_White

Still have to be careful, they have another method where an update is delivered as a print job (that doesn't print anything). So also don't let any windows or mac (or android or ios or chromebook I guess) clients reach the printer by any means, even usb, with drivers you aren't 100% sure about.