[Kindle Fire Q&A, Help & Troubleshooting] LudditeNoob:
My Fire 10 HD (along with every other device on my LAN, including my router) has been hacked. Truly malicious user(s). Remote command injection on the router. Privilege escalation and rootkit shenanigans. Rogue access points bouncing around everywhere. A real nightmare, especially because I didn't know any of these terms until a month or so ago.

Looking for info on IOC as to the Fire 10 HD. This forum was the top result for like 90% of shot-in-the-dark Google searches I did of terms I picked up via a bunch of seemingly helpful apps (root analyzer, package browser, system info, vulnerability scanner, etc.). Don't know if y'all do this sort of Noob helpdesk stuff, but any insights would be appreciated. So with the caveat that I'm a babe in the woods on this stuff, would love to know if these anomalies that (my untrained eye) picked up are in fact worrisome:

1. Network scanner apps identify my Fire 10 (and Fire 7, fwiw) as Linux routers

2. Ditto for my Google account. Login authentication page identifies my Fire 10 as a Nexus tablet and my Windows PC as a Linux desktop

3. There seems to be some "version pinning" afoot. Device itself says I'm running Fire OS 5.3.7.0, build date last year.

4. Relatedly, I *think* "SELinux enforcement" has been disabled, but have no clue as to how to determine whether that is the case

5. Various apps identify this as my "Kernel Info": "Linux version 3.18.19+ (build@i3-ri-14-use1a-b-70) (gcc version 4.9 20140514 (prerelease) (GCC) ) #1 SMP PREEMPT," followed by an install date in Dec 2019. Is that normal?

6. I have yet to find an app that can identify the "bootloader" (all say "bootloader unknown")

7. According to the device and various package browsers, every system app on the Fire 10 was installed in Dec 2019 and "updated from unknown source" at the exact same time. I have reset the device to factory defaults a dozen times.

Finally, after every factory reset a (seemingly awesome) antivirus app developed by "BSafe Labs" identifies the following vulnerabilities, in descending order of severity:

A. "AN elevation of privilege vulnerability in the recovery verifier could enable a local malicious application to execute arbitrary code in the context of the kernel. This issue is rated as CRITICAL due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair"

B. "An elevation of privilege vulnerability in NFC could enable a proximate attacker to execute arbitrary code within the context of a privileged process. This issue is rated HIGH because it could be used to gain local access to elevated capabilities, which are not normally accessible to a 3P application"

C. "An elevation of privilege vulnerability in Package Manager could enable a local malicious app to prevent users from uninstalling applications or removing permissions from applications. This issue is rated as MODERATE because it is a local bypass of user interaction requirements"

D. "An information disclosure vulnerability in Audioserver could enable a local malicious application to accees data outside of its permission levels. This issue is rated as MODERATE because it could be used to access sensitive data w/o permission"

E. "Multiple integer overflows in teh GraphicBuffer:unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp in Android through 5.0 allow attackers to gain privileges or cause a denail of service (memory corruption) via vectors that trigger a large number of (1) file descriptors or (2) integer values"

Give it to me straight: how screwed am I? :(:(:( Any insights would be appreciated.