AFAIK most people's contract with their ISP includes fine print that forbids a lot of the nasty things these IoT and "smart" devices do.
Alibaba is an interesting question though - if the device is from China (or some such) it isn't clear what the courts can do...