Isn't it possible to force these devices only call a fixed IP address? Same thing for phones: why are these devices allowed to call back arbitrary IP addresses without the owner's control?