That’s my issue with it: iot devices shouldn’t have access to the internet by default. With Matter it’s possible. No one is going to create outbound firewall rules for these things.