Using these cheap boxes carries inherent security risks. Because the firmware is often provided by unknown third parties on file-sharing sites (like Baidu Pan or personal Google Drives), you are trusting whoever compiled that ROM with your home network security.
However, by 2026, most maintainers have moved on. The latest LibreELEC nightly for RK3128 is from 2022, and no Android 8+ ports exist due to GPU driver incompatibility (Mali-400 lacks official support for Android 8’s Treble). rk3128 mxq ep 68
This specific board revision is critical for finding compatible software. Using firmware intended for a different board version (like V1.2) can "brick" the device or cause hardware failure, such as the Wi-Fi chip not being recognized. Software and Customization Using these cheap boxes carries inherent security risks
Many original MXQ devices came with pre-installed malware or analytics libraries: The latest LibreELEC nightly for RK3128 is from
Some enthusiasts use forums like 4PDA or specialized Rockchip communities to find "debloated" Android ROMs that remove factory malware and background processes. Firmware upgrade — Firefly Wiki