Keys were labeled "DO NOT TRUST." Nearly 500 device models use them anyway.

TLDR: An AMI testkey was used in production by a bunch of manufacturers. The key has now been leaked.