Another safe option I use: Vero V [1], it runs Debian + Kodi, so it is all open source. Great support by Sam, the founder, too.
Also, you can buy a more capable used ThinkCenter micro for less money, so the value proposition isn't exactly great.
This seems to be a side effect of KODI's extreme aversion to being associated with piracy.