I scanned the code and don't find any egregious problems like hard coded passwords but I just assume the codebase is a complete shit show with flaws.
I will not connect those devices to my wifi.