Unitree G1 robot has a root exploit via BLE using a hardcoded AES key shared across all robots
data is continually sent to overseas servers despite GDPR; as there are full lidar, audio, and video sensors, the data/surveillance potential is large
arxiv: