The simple solution therefore is just don't connect it to the internet, which is still viable (even though Amazon wants to co-opt everyone's devices for their IoT network).

Don't plug an ethernet cable into it, don't give it your wifi network passcode.