People don't realize that every device with a LiPo is only one (possibly malicious) update away from becoming a fuse.

Meh, often the LiPo protection logic is hardware based to prevent just this sort of mistake/sabotage. Some protection chips are software-configurable or reprogrammable, but the parameters are again limited (by design). Perhaps you could cause long-term damage by programming it to manage the battery poorly, like repeatedly charging/discharging it deeply.

I think "every device" is just fearmongering. No software Apple/Huawei push could immediately make a phone or laptop combust. Electric cars, 3D printers, etc... I'm not so sure.