I think the point isn't as much the product (which I am sure supports authentication and encryption) but the reaction. OK, some partner installed it in the laziest way possible and said 'pay me'. The reaction is a common one nowadays - deny or even retaliate. Not even going into the lack of verification during/after handoff.

Companies that sit on their heels, even if they have this kind of following, they are destined to fail. As long as they still make what would now be called old school lego stuff, why worry? +1 to the first person who gets doom to run on a brick.