Comment by Nextgrid

I'm not sure whether the doorbell uses the same Tuya platform as their vacuum cleaners do, but if they do then there's a major vulnerability there - essentially all their Tuya-based devices can be accessed by knowing just a (sequential) ID.