This always reminds me of Xiaomi "smart" devices that will ask you for a password, but password is only in the interface so if someone connects to the device and sends a command directly the device will oblige.

Sure, that's not as critical as medical devices, but it feels like everything nowadays is manufactured with the same mindset: if I don't know this might become a problem, I ignore it