On site stuff likely paid minimal wage and not trusted change a freezer settings. Centralized management is cheaper (until it's not). But there are many ways to do it more secure than connecting the device to the internet and allowing incoming connections from any IP (how likely it was done).