I wouldn't want to rely on wireless ethernet - there's too much in there that could change over time to the extent that no then available device could talk to it.
Preventing managers from causing on-line update to become available is really difficult as long as software can do updating, since even if on-line update is not implemented from day one, it could be implemented via the last non-online update.
The solution is a device that is physically incapable of updating itself unless some local action is taken, such as pressing a button. As long as no one implements a remote button-pressing device.
Sylvia.