Or you can isolate the damn cellular modem as an external Ethernet-tethered device. Just like we do now with broadband modems I mean, remember https://www.theregister.co.uk/2004/08/19/infected_in20_minutes/ ? Anyway, there's a long rant about that here: https://restoreprivacy.com/controlling-communication-channels/