Whoa — a DIY modder accidentally accessed ~7,000 DJI Romo robot vacuums. By extracting his Romo's device token and using a 14‑digit ID he could steer bots, view live camera/mics and build 2D floorplans. He didn’t bypass security; he reported it to The Verge and DJI patched servers within hours. Major wake‑up call for cloud‑connected home gear.