xcpe backdoor

Google: TV Box Maker Sold 1.3M Devices to Criminals

Google says Shenzhen OEM Videostrong baked the x.cpe backdoor into Android TV boxes and sold access. So what does 'cheap' hardware actually cost?