This would be illegal on so many levels in my country.

It is also not compliant with GDPR but I suspect these are not selling in Europe.

But this is in line with the general idea that anything you put online in some form will be public at some point. Internet Of Things to be hacked.