On the one hand, the CUPS bug is catastrophic. On the other hand, my HP printer probably has more security holes than my sieve. (Features include: Only SMB1, unencrypted e-mail authentication, firmware 2011 - made 2017) Thus, anything printer-related should be strictly local.