Every day i look across at a gorgeous device on the corner of my desk gathering dust that "could be" if there were the ability to run any android app on it (...namely the Homeassistant app).

Given the device's age, abandonment, and lack of recent updates, I'm curious as to why someone hasn't been able to figure out an exploit chain for this particular line of devices using the old chrome 121 browser that most of them have installed during its useful life. Is it simply because these devices were never owned by the more technically inclined crowd and there was a general lack of adoption? Fear of repercussion? Lack of public CVEs that would be able to attain root from 2024?

I know the device survived Pwn2Own 2019.. What generally incentivizes someone to do this on a device?

Genuinely curious.