They are not all local attacks. The TV MITM attack can be launched remotely. If he can find a flaw in the content rendering code, then that's a remote attack.

They are not all local attacks. The TV MITM attack can be launched remotely. If he can find a flaw in the content rendering code, then that's a remote attack. Also, his NAT router itself is a security time bomb, via its remote update mechanism. I would never run an ISP router in router mode; that's such an obviously bad idea from a security standpoint.