They pushed out an update to their Huawei HiLink software (which runs on a smartphone to connect to mobile 4G and Wifi routers) last night too.
Not a great start. But then, I disabled UPnP on my 4G Wifi router as one of the first things out of the box, and even put it behind a real router when it's at home (so even complete compromise of the device gives them access to... nothing... because it's all WAN-side of the real-router and treated as totally untrusted).
Biting the hand that feeds IT
