In the article, the customer opted in for that function thats how he discovered the vulnerability.

The flaw of the function is that it needed the file to first be uploaded to their server and that the upload was unencrypted.

>Moore had enabled the option manually, which is how the security flaw was eventually discovered. By default, the Eufy app’s camera notifications are text-only and don’t have the same issue, since there’s nothing to upload.