Like other IoT security flubs, this one is full of elementary errors that you're just not supposed to make any more.