Quoting Kohler:

We encrypt data end-to-end in transit, as it travels between users’ devices and our systems, where it is decrypted and processed to provide and improve our service.

I guess Kohler recently learned about TLS? IBM's response, which is a bit random in my opinion, addresses the idiocy of the E2EE claim lol.

I'd hope they encrypt data in transit? Not doing so would be an incredible, though unsurprising, show of incompetence. Setting up TLS and getting certs is easy these days with LetsEncrypt, and a company like Kohler could even get certs through AWS or Azure or something if they wanted.

I can't imagine why I'd ever spend money on a camera for my toilet, especially if it includes a subscription fee. That's a new level of stupid.