Here is the answer for your question from our product manager:
Bot is initially designed to be easily scanned and controlled by anyone without pairing it to a specific account in the app. If you want to limit the access control to yourself, you can set a password on it so that a stranger won't be able to control it without entering the correct password.
Currently, when a Bot is "linked" to your account, you can enable the Cloud Service on it, which means you can control it remotely via a Hub Mini. However, a stranger cannot utilize the Cloud Service because it is not linked to his/her account.
So at this point, you don't have to worry about the security. We are considering adding the feature to hide it from other strangers once it is linked to an account. We also plan to add the Home Sharing feature so that each SwitchBot device can be shared with your family members or guests.
We cannot provide a specific release date on the new features. We are constantly working on new products and features, so please stay tuned and once they are ready we will sign you up for the beta test program.
