Perhaps they simply mean they don’t want it internet connected at all. If it needs updates, have it be a device, USB or OBD or something, that would be the only vector for updates/direct OS control. Sure, allow internet for some features maybe, but isolate updates and the anything serious from remote tampering.