That would imply..
That the network is unencrypted or that the packets are flagged as specific types in transit for the hardware to be non agnostic towards the types of transmissions. Or it might be that they use some sort of API to push data out but not to receive.
I am however as puzzled as you over how data fed back into a system does not constitute commands or instructions? Surely a request for data is an instruction? Surely a validation check is a command of sorts?