It seems the Apple WAC protocol does not authenticate the client. As such you can take over IoT devices and connect them to your own network instead of the desired one.
The code used for this demo can be found here: https://github.com/BertoldVdb/WACResearch
Source
Configure Apple “Wireless Accessory Configuration” (WAC) device using PC