No, it’s a computer that controls relays. Computers that connect to the Internet need security updates to not be attack vectors. Blocking insecure devices from connecting to your servers is good security.

The devices aren’t bricks. They still function as thermostats. You just can’t use their cloud service with them.