It is kinda safe.
The device cannot be used for a botnet as it will only attack the lazy developer that made it unsecure.
The key in IOT is to not allow the variable part to be independent and connect to the world.
In this case a walled garden system is way better.. I have designed similar gizmos.. but only wibu provides something similar and it is clunky at best.,