If it's possible for a virus to be embedded in a cartridge and infect the printer, or travel through the printer and infect other devices via the USB or network

If it's possible for a virus to be embedded in a cartridge and infect the printer, or travel through the printer and infect other devices via the USB or network connection, that's a serious design flaw in the printer's firmware. It should never be attempting to execute information on the cartridge as code. Moral of the story: Don't buy an HP printer, and if you have an HP printer, don't use it, buy a printer of another brand.