Their support page does imply if you want to avoid cloud sync you should keep it offline, but perhaps that is just because it is the most brief/user friendly way to describe the situation. There definitely isn't an explicit option to turn off the cloud sync in the device settings, but I wouldn't be surprised if there are workarounds to this once you ssh in. You could also maybe block internet access to the device via your router settings, so you could at least use rsync while at home?
Sounds like you could maybe use git-annex on it for that? (I use rsync (via "FolderSync") on the android-based onyx boox max, so as soon as I turn on wifi it pushes to one of my personal boxes (internal format is a hideous sqlite-based thing, but after the third round of updates they generate competent PDFs so I just push those) - sounds like on this I'd also just use rsync from an ifup script or something...)
Wouldn't you still need to be careful about the device auto-joining to open public wifi? Basically, if you were going to be away from your house you'd have to always remember to disable the wifi before you left. Alternatively, just keeping wifi off and only using the USB cable means you don't have to worry about forgetting to disable wifi before you leave home. :)
This requires being militant about never connecting under any conditions. If the device ever is even briefly connected to a particular network (especially any commonly-named public network), unless that entry is cleared, the device may reconnect later unintentionally and with no obvious indication of having done so..
For those with more expansive threat models, intentional dvice or network spoofing or cloning might bebrisks.
Since firewalling is performd off-device (on the home-LAN router), this will resut in an unsecured evice.
My preference would be for some on-device configured networking limits. Putting full reliance in fixed-site infrastructure migh be unpleasantly surprising.
Or update/modify the networking, WiFi, routing, gateway, firewall, or other configurations on the device itself such that it connects to and communicates over only specified networks and/or hosts.
Again my point is that relying on off-device, local-netork hardware and configs is brittle.