My most worrisome IoT device I have on my network is a digital picture frame my wife connected, but I was surprised the company routinely updates it even though it's on Android 6 (!).
https://support.frameo.com/hc/en-us/articles/23433637149842-...
… TIL such things exist. I assume it's networking so that it can grab photos to display from "the cloud" somewhere, and periodically change?
Yes. Smart frames often provide an endpoint where friends or family can send photos that will be automatically added to the rotation.
Great gifts! (At least for those unconcerned with privacy or security, which is most people.)