He didn’t stumble on a bug, he landed in their backend home surveillance architecture. This wasn’t a mistake, this was a whistle being blown and the article missed it.

Just go to the house of any cyber security worker, or any sysadmin / IT worker and tell me how many internet connected smart devices you find.

The “S” in IoT stands for Security.