TCL smart TVs running Android seem to have huge security holes and could even be designed to spy on users around the world, two security researchers say. The issues do not affect TCL sets running Roku software.

“I can wholeheartedly say that there were multiple moments that I, and another security researcher that I met along the way, couldn’t believe what was happening,” wrote a researcher calling himself “Sick Codes” in a blog post earlier this week. “On multiple occasions I found myself feeling as though, ‘you couldn’t even make this up.'”