I am working on providing feeds with "Picture of the day" for the device. I agree that that service should run hardened software to prevent your scenario from happening.

If you run the device in local mode though, WiFi is never enabled.