“Realistically, this attacker isn't going to be able to perform an attack against the ComIP module. They don't have the skills, tools, or motivation to target an individual,” - Is this guy clueless? There was a show on US cable several years ago showing how professional burglars case neighborhoods looking for likely targets. If the one with a couple of brain cells realize they might turn off an alarm system they might be willing to spend time locating the vulnerable targets in their area.
Yes, many criminals do have a hard time carrying on a conversation with the vast intellect of brick. but there are enough with a clue who seeing reports like these (not condemning the report - it is needed) will realize they might want to learn how to remotely disable these systems.