“The hub communicates with the Sleep Number servers by opening an SSH tunnel and providing a reverse tunnel back to the hub that their developers can use to connect to the hub and do maintenance when needed.”
The Sleep Number hub reports whether someone is in the bed and runs Python 2.7.18 on software last updated around 2018. It also keeps a reverse SSH tunnel open so the company can log into a box sitting inside your home network. Sleep Number took notice and complained when a hobbyist plugin polled its API every 5 seconds. Its own standing backdoor into customers’ bedrooms raised no such alarm.