The likelihood of a virus spreading on an arranger keyboard is low because the potential payoff is low: the virus needs to be developed specifically for the device it is intended to run on, because the vulnerabilities of a device are specific to that software implementation. The total number of Genos sold will certainly be less than even IOT devices like lights, controllers, etc., and for sure computers; so there is a good chance that virus writers will target other devices and leave our good Genos alone.
Having said that, any system has vulnerabilities. If someone really wanted to take control of a Genos, it is likely that they could do that with some serious study and a pinch of luck. At times, like for example when the OS is being updated, the memory space is going to be writeable and thus a virus/ransomware/worm/malware could sneak past security.
At any rate, it pays off to keep regular backups of your work and of your USB keys. The norm has become to have at least three copies of your work: one on the machine, a second copy on a separate local drive, and a third one located somewhere else (a friend, relative, the cloud, etc.). I have kept only two and feel satisfied with that strategy. If disaster strikes, we can at least have our work back.
My 2c of course.
Best,
Luigi