Case in point: a number of years ago I knew a kid who was smart enough to flash Tomato on his router, enable SSH and even install a bunch of Entware packages. But he wasn’t intelligent enough to change the SSH port from 22 or leave the remote access disabled.

Fast forward a month or two and his ISP tells him that they traced some pretty serious botnet shenanigans to his IP.

Just because someone is smart enough to use a device doesn’t necessarily mean they’re intelligent enough to use it safely.