Or update/modify the networking, WiFi, routing, gateway, firewall, or other configurations on the device itself such that it connects to and communicates over only specified networks and/or hosts.
Again my point is that relying on off-device, local-netork hardware and configs is brittle.
That's assuming the device doesn't use straight IP addresses for whatever it's communicating with. That's possible, but pretty unlikely.