Agreed. It does seem to be incumbent on IoT makers/service providers/etc. to make security a core part of their product, though.