In tracking my app issue I did packet captures and saw the hub talking to AWS constantly. If the X1 cannot be configured or interacted with via the cloud, what is it doing talking to the cloud? From a security perspective periodic checkins are one thing, but this looks like botnet behavior where devices all over the internet are talking to a server waiting for instructions.
For now, I'm going to prevent the hub from talking to the internet. But a good feature would be to document what the X1 is doing talking to the cloud, and reduce the interactions to only what is necessary. There should also be an option to disable tracking and the collection of my personal information.