I must say this is indeed a fascinating threat vector.
"We have seen that you can embed viruses in the cartridges. Through the cartridge, [the virus can] go to the printer, [and then] from the printer, go to the network."
I don't see any instances of this type of attack in the wild. Also, if you made your cartridge "dumb" then there would be no threat vector any more.... no?