After posting this thread, I found this in another one:
I think it explains the voltage you've measured. I ended up getting in touch with Zooz, and it seems it was because the sensor was automatically connecting with S0 security, and never prompted me to choose. I had to get a z-stick to use as a secondary controller, so I could get the prompt to include without security.
