Ordinary users cannot audit the contents of closed-source firmware, and backdoor channels may still exist after changing the default password or rebooting the device.