This has nothing to do with this being a Chinese device, and everything to do with it being a low cost consumer device. The incentives for quality code here ar

This has nothing to do with this being a Chinese device, and everything to do with it being a low cost consumer device. The incentives for quality code here are incredibly weak, and the incentives for caring about security are basically zero. What damage does this vulnerability cause to Jetstream as a brand? It's not like they're going to lose many sales from people who read tech news sites. If you need to get something working at the cheapest price point possible, you cut all the corners you can - especially in the ways that don't manifest until outside the return period. Paying senior developers and doing external code audits are luxuries you can't really afford.