This^^^

Updates is what kills the network control. It changes the network setting from pre-shared key to simple. Turn off auto-update.

And for safe measure, no access to WAN. We don't use any of the smart apps, so no issue with doing this.