I guess that if it was possible to identify vulnerable players in either case then the serial number ranges would be mentioned in the FAQ?

It is better to visually identify the components than to guess which serial numbers might be the problem. Because even if they gave serial number ranges, there might be exceptions, so you'd still have to do the visual ID. So just do the visual ID.

Just remember that for those two particular issues, if your player says "rio" on the top, you don't need to worry.