I'm wondering this too.
Like hey, let's install some under developed AI from some unknown company with unknown security policies on top of a device with access to hordes of personal data and the ability to make transactions online.
No hacker will EVER think to use it as an attack vector /s