It's a $1 MCU, which will get embedded into a $50 device. If you're a company selling a cloud-plus-device product, then that 250k tooling cost and not-exactly-trivial attack process will be quite effective at stopping Chinese clones: with a unique per-device key there's no way they'll sell enough units to make a profit before you will inevitably ban their cloned key.