> It feels more likely to imply that "we have no hard evidence". There is hard evidence of the vulnerability, which logically follows from any OTA update capab

> It feels more likely to imply that "we have no hard evidence". There is hard evidence of the vulnerability, which logically follows from any OTA update capability, but there may be no hard evidence of exploitation yet. Think of it this way: if your software has a RCE, you fix or mitigate it regardless if it's actively being exploited or not. > Are you worried that your iPhone or Tesla will be hijacked the same way? That's a very valid concern for some people. Ultimately, software security boils down to "who do you trust?". Say what you will about the US, but your goals and values are very likely less incompatible with those of the US than with those of authoritarian China [1] [2]. [1] https://www.nytimes.com/2013/08/20/world/asia/chinas-new-leadership-takes-hard-line-in-secret-memo.html https://www.nytimes.com/2013/08/20/world/asia/chinas-new-lea... [2] https://en.wikipedia.org/wiki/Document_Number_Nine https://en.wikipedia.org/wiki/Document_Number_Nine