Re: Special access
In a world of off-site support, putting a complex device behind a real air-gap is not going to be popular.
So unless the bean-counters are going to splash the cash for on-site expertise (preferably not a gentleman called Ivan), security will be compromised.