I'm most concerned that this will make it feasible to perform rogue firmware upgrades to vulnerable devices that previously were protected by not being connecte

I'm most concerned that this will make it feasible to perform rogue firmware upgrades to vulnerable devices that previously were protected by not being connected to the Internet, turning them into various kinds of surveillance and denial-of-service bots…