Summarized very well by a Redditor (his name there is Vapeducator, for all I know he has an account here too.)
If you own this device I'd suggest attempting to return it from the B&M, perhaps show them this very post and explain that the legal repercussions of continued distribution of this device may be extremely dire, and overall, if more of these devices blow up on users it may fast-track consumer product safety legislation.
The Cherry Bomber should not be purchased or sold. It has an inherently dangerous design. Every single one of them should be removed from the shelves and all websites. Any stores that have sold them should make a maximum effort to recall them voluntarily and replace them with a safe mech box or issue a full-refund, hopefully before the consumer product safety commission or other regulators do so. A store may end up with a significantly higher legal liability if they don't make all reasonable efforts to mitigate the potential damages.
What's specifically unsafe is that the 510 center pin is directly connected to the positive side of the batteries instead of going through a switch. The switch on it works by connecting the grounded case of the box to the threads of the 510. That's crazy, because it makes the atty body have a hot/positive voltage connected through low resistance coils. Any conductor that bridges between the metal of the atty and the case of the mech will close the circuit. So now you have to treat the whole box as if it's loose battery by keeping all conductive materials away from the atty and case or else you'll get an autofire, except that it's worse than a battery because the distance between the atty and the grounded box is very small, much smaller than on a battery, so only a small amount of metal can bridge it.
This is not the way that most mechs are designed. The 510 threads should be grounded, not floating. The switch on a top-button mech should be connecting the positive rail/post of the batteries to the 510 center post only when the button is pressed, and this is indeed how most top-button mechs are designed, except for the Cherry Bomber. The design can't easily be fixed either. The switch, 510 connector, and internal battery connections would have to be removed and replaced with a different design, and that's unlikely something that could be done by a purchaser. Bottom-button mechs have the 510 center posts connected to the positive of the battery, but the negative post of the battery isn't connected until the button is pressed - the 510 connector is grounded to the case, so bridging it with a conductor doesn't complete the circuit.
If you own this device I'd suggest attempting to return it from the B&M, perhaps show them this very post and explain that the legal repercussions of continued distribution of this device may be extremely dire, and overall, if more of these devices blow up on users it may fast-track consumer product safety legislation.