If you replace my returned controller, do you change the device ID? Otherwise, someone else will end up with my cook data and be able to delete my cooks since cook history is tracked by device id, not by the user.
Yes, that's exactly what we do, change the device ID for that controller. Your old device ID remains in the database so that you retain your cook history, but no device will ever use it again.