Why is this allowed? There’s no way to consent to a coffee machine.
Presumably during setup and connection to the AP it has a ToS. Doubtful they just unboxed, plugged in, and it connected to the right AP and went.
It's implied consent when you give it access to your WiFi.
Why you would give a coffee maker access to your WiFi is the real question,
If you buy a Keurig machine you've already signalled you're a sucker. (sorry)