Yeah, a long time ago I started blocking outbound traffic to all but our laptops and it’s interesting how many things work perfectly well, but continually try to get out… the SolarPv inverter is VERY persistent to get to China due to an overly helpful installer setting it up on the wifi.

I now have a firewall alias to only allow certain devices out and then just update that alias, do whatever (usually updates) and then revert the alias.