What utter nonsense. First example would be these units probably use some ancient depreciated version of TLS or cipher suite that cannot be upgraded due to hard

What utter nonsense. First example would be these units probably use some ancient depreciated version of TLS or cipher suite that cannot be upgraded due to hardware limitations, forcing the back end to support legacy out of date software. Then the headline would be "ecobee doesn't care about security" with the Hacker News armchair security crowd all over them, claiming without specifics they could do a better job. Please.