The fact that it might query a firmware update if you’re not careful to never allow it to communicate outward is enough of a risk. I don’t want my appliances querying firmware updates that might brick the unit or give engineers excuses too not get it right the first time. I’ve seen what product owners do when there are known bugs but they want to ship because the user can just update later.