> He just authenticated with his own device’s token and discovered that the system had absolutely no concept of which devices that token was supposed to be allowed to access.

Privacy thru ubiquity?

(this is a dumb joke)

But do you want domestic appliances representing "proof of who you are" interacting on a universal public network?

Would it be a bigger fail if this product were better designed in such regard?

e.g., the Ring debacle

The designers of the internet left a lot on the table regarding security architecture and we will be paying the price for this design neglect for generations.