I’d go as far as 100% of them being played up for PR, because it’s always that someone has intentionally or unintentionally left it with access to the internet and given it instructions to do the thing it’s done. Nobody has ever asked it for an apple pie recipe and had it try to hack a server.