Comment by jpk2f2

Because you should never fully trust any IoT product that you don't truly have control over. There's nothing stopping a faulty or malicious update from being pushed out, or their update servers being compromised (see notepad++ recently). So why increase your risk, if you don't truly need it online?