Yes, that is exactly what I'm saying as that's what it sounds like.
If you can buy a new amazon device and have it connect to all your stuff without your input; what stops someone else buying an amazon device and connecting to your network with it?
Obviously I'm not worried about the device I actually receive; I'm concerned that someone can buy their own device and use it to connect to other people's networks via existing amazon devices.