Comment by gbear605
10 hours ago
A lot of them are controllable from mobile devices through apps that could have new code remotely deployed to them - for example https://www.dji.com/downloads/djiapp/dji-go-4. The apps are mostly for controlling the camera, but presumably they're not airgapped from the flight controls.
And they run heavily encrypted firmware, so you have no idea what is actually happening. There is so much CPU power in those things it puts your cell phone to shame and a lot more sensors to boot. Some models have 8 onboard cameras.