Forcing users to draw the syntax tree instead of writing one. It is programming by not programming, and ignoring states and context in the process.

No need to "double speak" the word "order".

Question is, whose risk? Without putting every conflict of interest on the table, what would you expect as end-user?

System admin will provision a unique access key for each mobile device (e.g. smartphone). It's a key distribution and provision problem.

For an IoT system that can be all local, with Zero Information Leak, users won't need a password.

And there is no adoption barriers.

Well, it is it is what they call "business friendly".

If all those systems cannot allow end-users blink a bunch of light bulbs at will, what on earth is the use of them?