- Not consider changing the root username and password? I would bake it in the bios or similar, and print it on the bottom of the device. - Not consider shutt

- Not consider changing the root username and password? I would bake it in the bios or similar, and print it on the bottom of the device. - Not consider shutting off the SSH server? I would keep sshd running, precisely for the fact that the person who bought this could modify it I'm a reasonable and sane manner, like any Linux peripheral. It also allows for more extensibility past what I thought of. - Not consider writing the most delicate parts in a memory-safe language? I wouldn't reinvent the wheel. Use Linux, QNX, or Tron. Probably not Tron, but it IS open source. - Not consider enabling Secure Boot or tamper detection? Are we assuming the person who buys this as the enemy, or are we trying to evade Mission Impossible level national spies from looking how some IoT shit works? - Not consider building a system for easy and automatic security updates, perhaps with an opt-out for those interested? Most "security" updates are just malware in disguise. I've seen enough de-featurization and others in the name of security.