An attacker requires physical access, but it’s possible to sideload Chrome onto some Android TVs which then gives access to the users’ email inbox. Google says it’s now fixing the issue.