Para 9.9 specifically mentions devices intended for 'perpetual internet connectivity'. If a device is not intended for continuous internet connection, the applicability of this specific paragraph might be limited, but general security considerations should still be addressed.
Source: CONSULT_MANUAL Para 9.9