The fact that the JTAG is physicaly there in a usable form at all is shocking. I don't design hardware, but even I know this.

Your spot on about the fix, though I bet you that come christmas, you could still go into a shop and see these exact models in use. That would be truely criminal, but we shall see. Though who audits/controls these things as if it was a car and a safty flaw or any consumer product then you know it would be forcebly recalled right away. Flaw in food packaging even gets recalled instantly, yet I'm not aware of any such conrols that could get this device pulled until fit for human consumption/use.

That all said I sadly feel the only way it will get changed is by active expliotation and insurance companies rasing the premiums of those poor shops using such a device.

I hope the right thing is done, but why do I have little faith in it being addressed in a timely manor, maybe historicaly alot of flaws of such types of devices are usualy patched by the manufacturer by using the denial patch, they deny its an issue and then magicly version two fix's it down the line.

Shame you can't flag a article with a revisit reminder so in 6 months time we can see how things have changed or not.