A novel attack on Android TVs, where people might sign into their Google account in an Airbnb or an office. Usually they're locked down, but by downloading other software an attacker can access the entire contents of the Google account, email, drive, more
https://www.404media.co/android-tvs-can-expose-user-email-inboxes/
Gee, you mean a £300- TV from China shouldn’t be trusted with your Google account?
^^^^ Update:
In a statement to 9to5Google, google said that a sideloaded version of the Chrome browser won't automatically use the login token from a user's Google account in apps like Drive or Gmail.
Google also told 9to5 that this bug fix is reaching Google TV and Android TV devices through an app update, which as 9to5Google points out, means that even older hardware can be protected from this particular loophole.
For a bit of background, this particular flaw with Android TV was first disclosed by YouTuber Cameron Gray way back in January
https://youtu.be/QiyBXXO8QpA