Guests make assumptions that the channel they are using to control devices in their room is secure. But it’s not.