The likely target that emerged in my mind reading this is mom and pop point of sale systems.

The operators of such systems are completely oblivious to such risks, and the underpaid PoS software support team following a script to restart CUPS probably are as well.