Why? It's also none of their business if you share code to frontend the system they sell to others.
I understand if we're talking zero days and you have reasonable faith the company will attempt to fix, but I presume here we're talking more accessible heating control?