> To be clear though, just because igloohome's lock is technically offline, it does not mean it's necessarily secure if there is a hole in their API auth. Sure

> To be clear though, just because igloohome's lock is technically offline, it does not mean it's necessarily secure if there is a hole in their API auth. Sure! But it sure cuts down on implementation complexity, and complexity is where security goes to die :)