Theyre jus trying to scare people, and even in this spooky scary context dummy phones defeat it

Honestly the biggest things are don’t run shit as root and don’t expose port 22. Especially don’t run things you downloaded from some website as root but in general just don’t run things as root. That’ll handle most problems that are likely to arise.

They’d only ever do that if there was mass compliance, if there’s none, they won’t risk setting off the powder keg