Not sure if i get above posts right, just thought i mention it.
I wouldn’t trust the printer manufacturer, clone the debian-10 template and install printer drivers in the clone and go from there. When opening a pdf it starts a dispVM based on the clone template that has no internet access.
Edit: Just saw Salting your Qubes and i am wondering how the print server works.