In any case, it’s a great example of just how much work it can take to fully understand and control an IoT device that’s tethered to a commercial cloud server. It’s not always easy ...
Security has always been an issue with IoT devices. Off the shelf devices ... The normal ways to do HTTPS with an ESP8266 is to either use Fingerprints, or to use client.setInsecure().