This time, it's a malicious manufacturer, next time it's a malicious hacker. Doesn't seem like connecting these to the internet is worth it.
Wilfully damaging someone else's property without permission of the current owner seems pretty malicious, regardless of whether the importers (or maybe someone who supplied to the importer) were in breach of a contract.
Even just building in the capability (assuming this wasn't installed via a generic software update, in which case I'd have some follow-up questions on the security against malware of these things) shows significant malicious intent.
The only surprising thing here is they took an action to brick something instead of just abandoning it.
You're right, but I wouldn't say surprising. I do wonder what would happen if the units just stopped working outright one day and they're all intended to be gridded and nothing works properly anymore and the distributors are stumped and can't get ahold of anyone.
This already happened to me. Sort of.
Saw an advt for Air Jordans for $7. With a pic of actual Air Jordans. Thought to myself, "it's only $7, let's see what happens".
A very sorry looking pair of shoes arrived a couple weeks later. With "Air Jordan" printed on them. They weren't actual Air Jordans.
There was no way, absolutely no way, to get in touch with the Chinese company that did this.
(one year later: "Auction sells rare early Air Jordan prototype for $3 million")