There's a box being sold called "SuperBox". It claims to be able to stream any movie/video. The claim is "just pay $300 and you won't need to subscribe to any streaming service anymore." However, part of what it does is hacks your home network and tries to take over every thing on that network. And it sends this all back to China. The vast majority of people buying & installing these are just ordinary people but some will be executives, or people working for the feds. Did they bring their work laptop home and plug it in to their network? So it can get attacked outside the office firewall? Remember how stuxnet was spread?

This is a podcast about it: https://darknetdiaries.com/episode/172/

I've always been suspicious why Chinese companies are adding internet capability to products where it doesn't make sense. Why would a power converter need internet capability? TCP/IP capability...maybe. But internet? Internet means "the whole world can access my device." Same with IP cameras. Or EV chargers.

And they require it. Without internet connectivity the device simply won't work. This sounds fishy to me.

These devices should only be allowed to access local network addresses and no (internet) gateways.