Google certified the boxes, the manufacturer installed a backdoor, and 1.3 million customers got an involuntary side hustle as residential proxies. Now the botnet is disconnected, but the malware remains and Play Protect is still disabled. Apparently »certified« just means the box passed inspection before it started spying.