From the fine article itself:
> If you wanted to have this thing completely isolated though, you could have a no-outbound-internet subnet with this device on it so long as the device you are going to run the script on has line-of-sight.
> You can do this because Tuya devices have a local-only protocol that tinytuya supports, so you can send commands just within your LAN.