Surprising nobody, as in nobody really cares if they are unaware of being spied on. If the utility does what it says on the tin, that's as far as the thought process goes. They don't even know these things can be hacked or be part of state surveillance. People that go "hmm… wait it must be connected to the internet?" are really tiny part of the market.

As people are accustomed to think having the password/account, means one else can have access to it. It never crosses their mind.

It's like how much Chinese network devices are prevalent in the market. It kinda does what it says, but also sends your data to the mother ship.

Authoritarian governments think alike.