But is it malicious or innocuous? I could see just the assumption being made that if it hasn’t phoned home it must be malfunctioning and ask risk mitigation then force it to brick. It’s not super unreasonable considering very few people will ever block the comms.
I wouldn’t argue it’s reasonable, but these kinds of decisions get made without much thought all the time whether we like it or not. It’s possible they just didn’t give it much thought. Or, it was just a directive from Legal and so nobody asks questions. Possibly the marketing team doesn’t even know this got made and still touts it as “works offline”.
I’m not really defending it but pointing out this is still on a different plane than outright maliciousness.
I'd have been tempted to explore this further - does sending fake or repeated telemetry satisfy it?