Agree with the other commenters here that requiring consent and asking for new hardware to be audited isn't really anywhere near enough of a punishment. I've r

Agree with the other commenters here that requiring consent and asking for new hardware to be audited isn't really anywhere near enough of a punishment. I've read through the full settlement here: https://www.ftc.gov/system/files/documents/cases/1523134_lenovo_united_states_agreement_and_do.pdf https://www.ftc.gov/system/files/documents/cases/1523134_len... As far as I can tell they've just been ordered to do things they should've been doing already (security testing, asking for consent). Is anyone familiar enough with the relevant US laws in play here to explain why there was no harsher punishment or fine?