With the right firewall rules it doesn’t have to be a headache. You can have the printer usable from local networks only and not get internet at all. What does it need it for anyway?