Shhhh, that's how I work on reverse engineering old IoT stuff! SDR, loose admit-all policies, extremely low power, figure out what APNs and info it wants, and start capturing requests from it.