I was wondering about that. Is there some sort of removal process when the lease is up? If there were, folks would just do it early. Maybe there's enough enforcement/followup to discourage that while there's still outstanding debt, but perhaps it's a thing later.
It's a good point. This purchase model with IoT-enabled PAYG devices means there's a built-in vulnerability in the entire infrastructure. And unlike with a centralized utility where hypothetically some action-movie hero could rip out the one central device that shut things down, here there's millions of them everywhere.
Except that chip that can remotely shut it off is still in it, waiting for a ransom attacker.