if say someone has login/password - can he/she just browse media and click buttons or can upload a malicious software/download all files remotely?
regards
They get access to everything, you should _never_ expose kodi to the outside world. Keep it locked up behind a gateway.
understood
i guess best way is to format the card and start from scratch
but they can just browse or download, too?