Years ago, I purchased the first-generation Roborock robot vacuum from Chinese company Xiaomi. Almost immediately, I noticed it was sending an extraordinary amount of encrypted data back to China. The official explanation: "Floor map models" and other "support features."

At the time, I was working in the intelligence community. When I raised my concerns, I was met with a familiar response: "You're just being paranoid."

Fast forward to 2026, and the "paranoia" is looking more like foresight. Modern Chinese robot vacuums have evolved into persistent surveillance devices, continuously uploading high-resolution floor maps, Wi-Fi credentials, and GPS locations to mainland PRC servers. LiDAR sensors can be hijacked as acoustic eavesdropping tools, reconstructing conversations with 91% accuracy, while documented camera vulnerabilities allow for live video feeds without user consent.

Despite this, it might surprise you to know that I still use my Roborock after two battery replacements. It remains the best robot vacuum I have ever owned. You might ask why I would keep such a device in my home.

The reality is that I'm not a collection priority for the PRC state. If I am, excellent; they are simply wasting their resources listening to Real Housewives reruns and watching me walk around my house with no pants. Beyond that, because almost everything is made in China, we often have very little choice in the matter. As we face even greater threats, such as PRC-made electric vehicles entering our marketplace, the goal is not necessarily total avoidance, but rather understanding the risks and mitigating them.

I still let my robot clean, but I've revoked its "clearance." I don't allow it any internet or network access, sacrificing a few smart features for peace of mind.

Pillar Member - Ryan Zorn

President CyberAGroup

For more tech / security stories head over to :  www.cyberagroup.com