Whether they remote into his device or it kills itself is irrelevant except that if it's local code that's even worse, as they've programmed in future obsolescence. That is indefensible, full stop, do not pass go.