There are only two CVEs related to Tuya and both are related to their cameras. Their protocol has yet to be exploited. If there are zero days, then this is the case for literally everything and your statement is useless.

Again, please post something for us all to read, or all this stuff you are saying here is worthless nonsense.