I think copying over USB and keeping wifi off is the only way to be certain.
I also do not know of any e-ink reader running only open software. (Android doesn't count, and even if it did, critical drivers are not open.) Battery drain on alternate ROMs is often high.
Many libraries have commercial third parties handle cataloging, holds, and checkouts. I am very skeptical that nothing leaks as a result.
|