I don't need to know much about what it's supposed to be doing to critique a data channel that transmits plaintext over a radio, or accepts commands without cryptographically authenticating the sender.

I also don't need to know much about the intended function of the device to find coding styles that cause problems in an embedded environments.