AND being able to further reprogram the device to gain control of the PC.

This is negligence of the highest kind.