Scope of his work didn't go that far, he looked at several devices and Alexa was notably chatty. He was measuring for abnormal data bursts from IoT home devices - included things like smart bulbs etc.

isn't the point of SSL that you can't do that (assuming the client is verifying certs, etc)?