"If they start to expose to the world that all they have to do is change the firmware, that weakens the entire encryption and security of the device," says Chris Morales,  head of security analytics at Vectra.