hard-coded login credentials on its D-Link camera software that used easily guessed passwords
storing mobile app login credentials in human-readable text on a user’s mobile device
expressly or implicitly describing its hardware as being secure from unauthorized access
and
repeatedly failing to take reasonable testing and remediation measures to protect hardware from well-known and easily preventable software security flaws
I bought a 2 MP indoor D-Link camera once, and cybersecurity was the least of its problems. Look at this INDOOR image quality. This is what you get when it works. The video feed freezes and drops out all the time because the network interface drops packets like crazy. That makes it impossible to upgrade the firmware, and almost impossible to load configuation pages (hence why the camera's built-in timestamp is still enabled and wrong).