>or the legacy PC can't be kept behind a firewall that only lets data out

Only because I had the same thought and I feel like you might know more, is there an example of software that does this securely?