Cars kill people. At worst current IoT let a pirate control your light bulbs, see your heart beat or record your sleep patterns, waste your food and listen to your music.

This won't interest anyone.

For this to start seriously motivating people, you'll need:

- even more numerous DDOS, with more expensive consequences. Companies are affected so they act.

- scandals with naked people, preferably famous ones or underage, or both. People that gets the medias talking.

- money stolen. A lot, to bother insurances.

- people dying. Scaring the public always work. E.G: fire started by pirated IoT device.

Otherwise nobody is gona bat an eye.

We don't live in a world were most companies do the right thing because it's the right right. Remember that tobacco companies use to run ads to show you how cool your life is with cigarettes while lobbying the congress to state how non dangerous for health it was. Remember that people are putting their entire life on systems with text analysis, geolocation and face recognition and they don't see the big deal out of it. Remember that the government spies on every citizen, considers it perfectly acceptable, and that the citizen let it to.

So really, the fact that your connected fridge has an open telnet port is not going to move anyone.

You need damage done to get a reaction. Not potential damage.