This popular smartwatch aimed at kids had a backdoor that received covert encrypted commands via SMS.