The other problem is that the manufacturers can also use AI to improve their DRM and do red-teaming to fix "vulnerabilities" before release. Right now they're not because it actually takes some effort but eventually they'll be able to just tell their agents "make sure no unauthorized clients can connect". I expect that several years from now there will be a sizeable market for pre-2027 hackable devices.