That's pretty much how all modern IoT crapware works now. It has to build a tunnel through my NAT to the cloud so I can control it with my phone, which I never need to do unless I'm standing in my living room, and they have the nerve to tell me this is a feature rather than a bug. All so they can better monetize me by charging me a monthly fee, arbitrarily alter the functionality of my device through unwanted software upgrades, and spy on me and sell my data to advertisers. No thanks, assholes. If your device doesn't work without knowing my router's access code, sayonara.