~~
I am getting the point.
In that sense, if the person never updates the firmware, everything will remain the same. Although you already know that if the equipment falls into the wrong hands, this situation can be exploited.
Furthermore, this may have left a message to hackers that eventually there is a backdoor, and therefore they will be able to look for it with greater intensity. By the way, taking into account that this firmware came to be available (now it is no longer, right), many may already be analyzing to see if they detect where this back door is.
Although I think they have a big miscommunication on this topic, they will hardly be able to control this situation.