If I had one I would definitely try creating a separate VLAN for it to control, otherwise it's isolated from your files but still has access to your network and devices in it.
Put it in a faraday cage with some kind of explosive device set to trip if it escapes containment. It's the only way to be sure.