For those who don't remember, this is the same company that was bilked $46 million in an email spoof attack.
https://www.theregister.com/2015/08/09/ubiquiti_stung_by_ema...
They're used as a bad example in my annual corporate infosec compliance training.