>How hard would it realistically be to either bribe or get someone in place to upload an update.

For a big tech company? Really fucking hard. Look at how many Apple devices there are in the world and collectively how much financial and personal information they protect. Now tell me, how many times has there been a breach at Apple?

Governments have even shown that they CAN'T get into Apple devices, they had to take Apple to court to try to unlock a proven terrorist's phone. The only argument you are making is to not use cheap knockoff robots. It is actually really straightforward to make a secure consumer product, if you put the time and money into it. Companies have done it, and continue to do it. It is why you aren't constantly losing all the money to hackers just because you use online banking or having your network hacked all the time because you use an off-the-shelf router.