And then you get hacked. Pos code is junk, and the os they run on is outdated and unsupported. It's amazing any of it actually works.
But to your point you can basically go back to the archives of the 90s internet and go on a shopping spree of vulnerabilities for dos looking at Trojan/virus code.