@steely_glint I'd try hard to make the device not require an Internet connection at all (and not make use of one if it's available). This can sometimes be done by having it talk only BT, or by having it use LAN to communicate with the user (harder, because people something have APs that refuse traffic between different clients). That would make the criticality of updates way lower.