> my gut feeling is that this is pretty advanced stuff, right? Granted the models didn't start at zero - the CVE was described online so it had a hook

Did I miss something? The article mentions that a similar tablet was rooted and described online with the exact CVE the AI ended up using on this tablet. Why is that super sophisticated?