Can they get in remotely? I would love to read more about it if you sit on some sources since I am just a novice.

Edit: Saw the comment about updates now.

(If I recall there was a reply from some devs about that update claim, and I got my impression changed after e/OS presnted some statistics.)

I think I found the reply to the accusation:

https://community.e.foundation/t/e-os-and-security-updates/72384