I am not sure about naming the company, as I'm not sure it would help them (but maybe?). The device is in the IoT/fitness space. I don't think explaining good security practices to a customer support person is going to help as they are just following their script. The bug is irrelevant to the security issue of asking for a password; it is not a security bug itself.