Theoretically they could get the camera itself do auth, and then the server becomes fully 'dumb', and need not even be service specific.
Theoretically they could get the camera itself do auth, and then the server becomes fully 'dumb', and need not even be service specific.