afaict only if a specific hardware vulnerability was found and they cross-linked it with an online account or other network info to try and exploit it.

Or, I guess you could just assume Windows and go with one of the many zero-days that happen there. The trick is still crosslinking them tho. Presumably google has the wifi info.