I don't know what's crazier here: that the website was hosted on the same server as their smart home platform or that we live in a dystopia where mask demand ddos'd an air conditioner theverge.com/2020/4/21/21229…

They say in the article it's the user authentication service that both things share, still dumb but more understandable