This device is a bit too open; last week they shared a custom firmware to disable unsigned updates over Bluetooth.

https://news.ycombinator.com/item?id=48382310 Pwnd Blaster: Hacking your PC using your speaker without ever touching it