Keep it far away from the internet.

Now for an idea time. Printer with WiFi that auto-connects to unsecured networks (read “public”) to install updates for user’s convenience. Or, the drivers could proxy host’s connection. Or, download the update to host in advance, then auto-update by pushing to the printer when connected, even offline. Or, build an LTE modem into the printer.