A connected floor-cleaner is at the center of a warning about cloud authorization, physical control, and why IoT security fails far beyond the device itself.