Smart engineers will include a physical bypass in this sort of thing. Store employees should be be able to yank a lever to throw the thing in manual mode and get it off the compromised internet system.