[fxtentacle]

My personal guess would be that some manager successfully "reduced costs" and got a big promotion and bonus payments by outsourcing all of the development to the cheapest company they could find, meaning it was likely outsourced to college graduates with no practical experience somewhere in India.

Plus most low-level hardware components are built in China and nowadays also designed in China, so most likely the hardware design shop in Shenzhen sent them a firmware example with Chinese documentation.

But management and oversight is in Seoul, South Korea. Thanks to that 3-way language barrier, I'm pretty sure the supervisor on this project had no actual clue as to what the hardware and software were doing. But he didn't need to. The most important aspect of his job was to keep his mouth shut and not delay production roll-out.

In my imaginary set-up, is there any actor who has any incentive to produce a secure solution? I don't see one. I believe for everyone involved, the illusion of security was "good enough". So here we area with "good enough" in production.

[mdp2021]

> the illusion ... was "good enough"

But this should be grounds for legal action, because the customer is paying for a service, not for the illusion of it.