I was wondering about how bad this was against industrial standards, considering they've been articles about TP-Link and other Internet-of-Trash devices that have a lot of unpatched issues.
The article seems to suggest Hawaii is exceptionally bad at patching or best practices in security.
It's a low bar, but apparently they managed to not clear it.
Which seem to include Juniper and Arista and not the other base station providers listed in the review such as Nokia, Ericsson, ZTE, or Samsung.