The 8266 has no flash readout protection, and the UART is exposed on a programming header. It was very easy to dump the firmware.