Re: Why an update?
Companies are damned if they don't update their devices, now ones that do are being criticized?
Yes, they messed up during an update, but at least they were updating
Yes, I would never trust an IOT access to my residence, but they seem to be doing the correct thing towards fixing the problem
Who knows what they were fixing with the update - TLS v1.2 support, or as others have said - maybe issues with buffer overflows, etc.
This sort of stuff is just really the beginning (of the tip of the iceberg) in terms of breaches that will occur due to IOT security.
I, myself (which I am usually quick to criticize) am not ready to jump on them quite yet except for the fact that yes the entire issue was caused by updating the wrong device - that does indicate some sort of inexperience where there should have been none.