> you don’t need to have full control over every device that can possibly run code

I argue that if the device sends data to third parties over radio/internet and/or the manufacturer can remotely push updates that changes the devices behavior then users must have full control.

Something like that should become law.

Then manufacturers can keep devices locked down as long as they stay out of the surveillance game.