alt Hacker NewsThere is value in nuance and debating whether the solution should be scaled down to say a store ( or only available on local vlan or something), but I think the value of discussing that is kinda diminishing, when, apparently, the controls for all stores can be done from the same hit.
But to address your specific point:
being able to monitor does not ( or at least should not ) automatically equal put it on the web
There are most likely IT governance problems: builders bought fridges, IT didn't provision sufficient access, installers put 3G keys instead of spending time getting the correct VPN/networking, and a few months later no one knows how this thing works, and IT is not mandated to find out that shops ever did that.