Luckily, most embedded devices lack the smart to attach to two networks at the same time. So you keep it locked into a network where it can only do your bidding, and it won’t listen to anyone else. Unless they built in some very crazy and nefarious code and drive around with network enabled cars in the owners neighborhood.
deleted
Not everybody has the money for an extra router.
No need for an extra router. I just put those device into the “has no internet access” group. It is one of those “Parental Control” things. Every device inside the net can see and talk to it, but itself cannot talk to anything outside.
deleted
Until the router needs to be reset, or something else happens to it.
That’s what “configuration backups” are for. You’ve got some, don’t you?
deleted