Well, I think it’s ok to connect it to WiFi (with temp password), update it, then disconnect it and change the WiFi password. Yes I know it’ll try to phone out with unprotected WiFi but those are increasingly rare. You won’t be able to update it later without a usb stick though.

It’ll probably be fine. Probably.