The computing freedom = a plausibly deniable backdoor.

https://nvd.nist.gov/vuln/detail/CVE-2023-1389

Another favorite, https://www.synacktiv.com/publications/cool-vulns-dont-live-...

the router sniffed plaintext http to grab HTTP User agents to put them into a curl bash command line string. Nice RCE from the browser.