I imagine if this really is an attack the attacker would expect these devices to be subject to scrutiny - perhaps the first set of fans released to journalists are safe, but as the summit goes on and the initial reports cleared them then just bribe hotel staffers to surreptitiously replace them with Trojan Horse devices. Or have just a small subset of devices as THs and hope the ones that get opened up are the safe ones.