A pair of flaws in Kasa EC70 and EC71 version 4 cameras show how an attacker on the same network may be able to pull sensitive data from a device many users would assume is safely boxed in by the router.