I quite often shell into such devices. I think just playing tricks is a start and can easily escalate into something more serious. Alpine also uses Busybox by

I quite often shell into such devices. I think just playing tricks is a start and can easily escalate into something more serious. Alpine also uses Busybox by default (IIRC) and people will use that definitely so it's definitely a problem. Busybox is not only used in embedded devices.