Comment by kavalg

These are two different things. For example, it is possible that the fridges connect to a central, more secure MQTT endpoint to report telemetry and receive commands. They don't have to be discoverable on the internet. Also, not setting up a VPN, given the fact these vulns were known for so long is pure negligence.