I would encourage anyone running these, or any other internet of things... things to run them off of a separate portion of your network. By that, I mean pick up another router from which you can segment and run your devices, those that are not something on which you might be doing your taxes. Plug IOT router into a wired port of of your existing isp router and connect your IOT devices to it. Your IOT devices will then not know that your pc's, phones, things which may contain personally sensitive data, even exist. This is what you want. The why being that IOT devices, including those falling within the security realm, are sorta notorious for having vulnerabilities outta the box and then continuing to have problems.
More thorough explanation of segmentation here: https://www.ckd3.com/blog/2018/10/15...in-the-iot-era