I'm not convinced that it needs to be internet controlled. Hopefully it uses protocols like BLE or Zigbee requiring proximity. That way such an attack would require being physically near the device.
IoT is a raging tirefire. It's hard to even imagine how bad the security situation is.