[wil93]

But the malware could be installed in the hardware.

[pbhjpbhj]

That's a separate issue, surely. The subject is manufacturers not properly clearing user data and saying the mitigation is "just don't sell it".