@corbet I did a similar thing, although my long term storage is InfluxDB. I've also now switched to an Enphase IQ gateway for monitoring the panels so I'll be harvesting data from that instead of the SunPower PVS.
@corbet @kevin @DamonHD We had a house with an Enphase unit (I think an Envoy) and I recall that they have to give you an access token (like a key) to access the unit's API. The tokens expire after 6 months, I think.
I was also brushed off and even scoffed at when voicing concerns about having any of this high-powered (10KW peak output) equipment sitting on the Internet. (I am of a school of thought that considers the usual nostrums about security to lack credibility.)