[fylo]

Don't put them on untrusted networks. This always seemed obvious to me.

[tehlike]

Untrusted network is not sufficient, you need to cut them off internet, in general.

[baobun]

The internet should very much be considered an untrusted network.

[aaronax]

My initial read of proximity being sufficient to exploit 3 is incorrect, so yeah as long as you control the Wi-Fi network sufficiently then things should be fine.