One thing nobody is touching on: since it's not actually open source, when this thing is found to have dozens of security holes (or any bugs), they are not going to be patched.
Has that not already happened? Spotify recently broke streaming on a load of AVRs following the Anna's Archive release, I'd have thought this hardware would have suffered the same fate.
( Their announcement: https://www.bose.com/soundtouch-end-of-life The API doc: https://assets.bosecreative.com/m/496577402d128874/original/... )