https://www.darkreading.com/ics-ot-security/20k-ubiquiti-iot-cameras-and-routers-are-sitting-ducks-for-hackers
In the cloud, patches disseminate automatically. On your computer, you get notified. IoT devices, meanwhile, can escape attention for years on end.
If you have a internet attached device and it isn't getting systematic and timely updates, you have a time bomb. Doesn't matter who made the device initially
Ubiquity has patched the issue identified in the article, people have these devices deployed and they are not patching them....
This is why I avoid opening up "service" devices to the broader internet.
My current work around is to access a computer with TeamViewer on a given local network and manage things from there. There are probably flaws with this approach too, but it seems like a more manageable solution than giving IoT-type devices access to the open internet.
I do wonder if protocol like Yggdrasil would be a good solution in the future.