It's becuase Xiaomi integrated it just like all of it's other smart home products with Mijia - Xiaomi's smart home mesh [0].

In Asia (but arguably the same in the West given the proliferation of Ring and smart home hubs), consumers have less of an aversion to smart home and connected products in general.

Keeping IoT devices on a separate segmented network with strict DMZing, turning off unused features, and not sharing passwords would provide enough security for most home users. I recommend reading James Micken's essay "The World is Ours" [1] on the diminishing returns of certain security features at the expense of user experience. I also agree with it as someone who used to do edgy stuff with SHODAN as a teenager.

HNers tend to be the minority amongst consumers, which is assuming the opposite of the HN herd mentality tends to be a fairly successful strategy.

[0] - https://www.mi.com/global/smart-home/

[1] - https://www.usenix.org/system/files/1401_08-12_mickens.pdf