It doesn't surprise me. Most of these cheap Chinese smart devices that connect to internet are poorly made and designed to make the company money and they don't care about the customer.
I want to automate and add as many smart devices I can to help us out but my wife is concerned about security so we've limited the amount of smart tech in our house until manufacturers have made these devices more secure.
Currently we have smart bulbs, plugs, and an Ecobee thermostat. We setup a minimal network for our smart devices. This network has only access to the internet but no computers or research shares on this network. We setup a separate network that our computers, network shares, and mobile devices connect to. This way, we hope to keep the less secure devices away from our private information we really would prefer not share with the world.