> Nest devices don't run untrusted code.

Yes they do; they run code written by Google. The only thing worse would be Facebook; the literal NSA are more trustworthy.