Hacker News Reader

There's a difference between pressing "update" in a known-compromised device's webUI, and flashing it from the outside.

The advisory stated affected devices could be update through the device UI.

But if it didn't, then that's another can of worms.