Yeah - mistake that the seed was derived from the Serial Number (MCU UIDl) that was likely linked to the customer data that they didn't delete lmao
The weakness was structural, not a privacy-of-serial-numbers problem. I’ve seen no evidence of the latter