Running Arduino Firmware on a GOJO LTX-7 Soap Dispenser
github.com
github.com
E.g. when I went to replace a faulty switch on my Logitech Perfomance MX mouse, I found an ATMEGA324PA. Debug pins seem to be exposed as well: https://steelcityelectronics.files.wordpress.com/2015/05/img... (not my site). But since I still use that mouse, I'd hesitate to flash the Arduino firmware on it ;-)
Another ICs for shenanigans of this kind: In smaller, bluetooth-enabled devices I usually expect to find a nrf5x these days (and FCC docs often allows pre-purchase clarification). I think both nrf51 and nrf52 are supported by Arduino and ZephyrOS. Bonus points, though I not yet tried that: Their firmware dumping protection seems to be faulty (though the nrf52 requires power fault injection), so reverting/modding could also be an option.
From my experience and he newer nrf52 chips are vastly more supported by software than the nrf51 ones.
For maximum creepiness, I recommend adding a small speaker. And a covert way to have it act perfectly normal, so you can say "it never does that for me" followed by a quick demonstration (most simple: have it misbehave with some chance, and then have it behave normally until a number of requests have been made or a timeout hit).