[mortenjorck]

In this case it’s actual malice, that the streaming stick is set up for residential proxy and ad fraud straight from the factory. But incompetence can lead to the same place if it’s a poorly engineered, un-maintained device with an old version of Android that will never be patched and is always one no-click exploit away from being commandeered into residential proxy and ad fraud.

[FinnKuhn]

Those TV streaming boxes really are (from a cybersecurity perspective) probably one of the worst things you can buy. Here is the "Darknet Diaries" Episode on them: https://darknetdiaries.com/episode/172/

[alex_duf]

I wonder to what degree malice can be engineered to look like incompetence?

[abbeyj]

Try examining the old entries from the https://en.wikipedia.org/wiki/Underhanded_C_Contest.