Anyone ever follow-through on trying this?
I'm interested in the HTTPS support, which looks like it gives a website where you can remotely arm/disarm. This would be nice since I haven't found an app that works with my phone (Windows Phone). Using a website would allow this to work across devices, but I'm not sure what else it would open up. M1ToGo has the option of requiring a username / password to connect, plus codes to do the arm/disarm. I personally like that (two factor authentication, basically) approach, as it would prevent someone from doing a brute force disarming of the system over the internet...I can't tell from their website how the website running on the M1XEP with their firmware works.
On the flip side, it does remove two things: CS Reporting over IP, and Audio system integration. I'm using CS reporting over IP, so I can't install without messing up the heart of the system. :-S