I bet someone returned that security camera.

No, if you read the article the author was downloading firmware from their website and still found the token.