The heart of the issue is how Android treats your Google account. Every Android device starts with the assumption that it is a private, one-person device, often giving access to the entire Google account.
A YouTuber demonstrated how with 15 minutes of unsupervised access to an Android TV set-top box, a criminal could get access to private emails of the Gmail user who set up the TV.
[
add
]
[
|
|
...
]