You are halfway there.
https://www.bleepingcomputer.com/news/security/coop-supermar...
This issue was that Visma (the MSP COOP uses for the Teller systems) had their Kaseya VSA server open to the internet and thus got affected by this.
An RMM itself is fine, needed to manage systems.
Do you know how many Swedish companies is on Office 365 + some RMM? A lot. lmao
We also have our own shit break all the time like Swish made by our banks.