although Ecovacs accounts are password-protected, and a further four-digit PIN code is required to access the video feed, that PIN code is not validated server-side—meaning anyone with the basic know-how of a tool like Chrome web inspector could bypass it
Reminds me of how Xiaomi password protected smart kettle was only password protected in the UI. I think, it’s an industry standard nowadays 🥲
Wow, that PIN code is really on the honor system, isn’t it?