All valid, but there’s also another vector: everyone with a gaming rig who happens to have installed something like ollama, downloaded something like gemma4, and ran it with broad access to their PC and network. In similar vein, everyone with a provider subscription who downloaded a harness like OpenCode, pi, codex, Claude code, etc. and is running the frontier models with broad access to their PC and network. Also, the hundreds of millions of tests being ran by AI companies in their half-baked “sandboxed” environments. Wouldn’t these cases potentially provide compute for every session that happens to discover the external goals?

If that’s the case, the issue could be ongoing and the introduction of IoT devices would only exacerbate it.