We need to start intercepting their traffic and redacting the information we don't want them to have. Just like how corporations basically MITM everyone in order to inspect outgoing traffic and prevent data leaks.

If the thing needs the internet to work, we should be able to whitelist just the data that's essential to its function and have the firewall automatically strip the remaining data from the packet.