What would the attack vector be? I’m not saying there isn’t any, I don’t know much about aerospace and this sounds interesting.
The cameras. But quite how, I don’t know.
About a year ago, I was looking for an action camera. I found a good DJI product, but then I learned that you have to link the camera to an app in order to use it. I am fundamentally opposed to that idea, so I looked up the equivalent GoPro camera. Turns out GoPro also requires you to activate the camera with a smartphone app.
I don't want to send my data to a company for something as trivial as an action cam. I was surprised to find that the US model had such an evil requirement, mirroring the Chinese model.
In the end, I bought the DJI action cam (cheaper, better) and activated it in a public location using a burner phone. You only need to use the app once to free the device and take it offline, after which you can delete the surveillance app. I have found no fingerprinting in the created media yet.
GoPro would have made an easy sale with me, if they had been more privacy/power aware.
I don't know how you'd get devices like that certified for certain higher security applications.