Does anyone know such a device, but for a CUPS/SANE server? It would allow tou to secure a printer/scanner (which often use out-of-date software stacks). I'm currently using a RPi for this, but require partly to use qemu to run this to emulate a x86-64 binary (Brother driver). How did we end up with this mess. TVs and STBs are same story.
Only sure way is to check availability of fully open drivers for all operations before buying.