I am always really curious to know how these kinds of services deal with security issues: they don't get to control the security of the devices they are running, and often will only even sort of have access to reflashing them; how do they deal with someone testing an app with a kernel exploit, installing a persistent backdoor, and then watching what everyone else later using that device is testing?