Silly season...
Does nobody else think this whole security risk business is getting a little out of hand? If you want a genuinely secure box, then you don't need to worry about whether or not it has any of the go-faster features that convinced us to buy it in the first place, you simply need to ensure that it is not connected to anything. For ultimate security, don't turn it on. If you must turn it on, then you must assume it is not ultimately secure and treat it with the appropriate caution. What is so difficult about that?