I'm reading that they could also do a remote reflash of the firmware and potentially brick the hardware.
that was correct in theory, but they've now patched the firmware, so it's a non-issue.
...for those who have updated their firmware.
Which we all know doesn't happen often, most users set it and forget it.
Which was the point of my post... likely the bulk of them out there are still vulnerable.
Additionally I happen to know that certain functionality only existed on the first S9 firmware and many users are reluctant to change from it.