Reminds me of how you used to be able to control various unsecured IP security cams by typing part of the URL that is common among them into Google.

I remember stumbling upon some random office building in China and was able to fully control every camera in the place. I never did anything beyond pan them around a bit—and nobody ever reacted to my antics—so I guess the camera movements either weren’t very obvious or staff was just used to being watched by management/random people.