“The same credentials that allowed him to see and control his own device also provided access to live camera feeds, microphone audio, maps, and status data from nearly 7,000 other vacuums across 24 countries.”
DJI sold cameras with microphones and maps into 7,000 homes and protected them with credentials that didn’t isolate users from each other. That’s not a bug. It’s a product decision that nobody challenged until someone looked.