The typical consumer has no idea what they're buying, and they shouldn't have to because the retailer selling the product should have done some basic due diligence before stocking the thing. People aren't going to some clearly shady Chinese website and buying a device labelled "cheap TV streaming stick, will sublease your internet connection to criminals", they're putting "FireTV" into amazon.com and somehow being presented with these things alongside the Amazon FireTV they expect to find, or maybe "streaming stick" which really shouldn't be surfacing clearly malicious products.