The most simple solution is to airgap and maintain discipline (ie do not plug in USB drives into your airgaped home network).
If you must update something, you can always do that like twice a year using secure means.
__________________
Grumpy as always.
|