Comment by haswell

In what way is what you quoted not describing an RCE?

Clearly there are unanswered questions like does this malicious firmware exist? and how likely is it that ESP32s in the wild were shipped with it?

But they’re still describing an RCE.