Here's a title you can reuse freely for the next decade or so.
(Startup/public/private equity owned) company <IOT device>'s collect data you don't want them collecting, use it for profit to your detriment, and didn't bother securing any of it because they don't care.
Product reviewers need to explicitly state that the cameras/mics/whatevs of devices have been used for nefarious purposes other than what is advertised on the box.
But we should not just sweep everything under the rug because a couple of nerds "knows about it" because there's a heck of a lot more people that do not.
In the event of incidents that result in mass deaths (oil spills, etc), tried as if mass murderers for the board.
CEOs are too often just scapegoats for the evils of a board.
Could work. But, unfortunately those CEOs make the law.
If we do nothing because of the "it doesn't work" in a manner you think fitting, then we'll make no progress. It's yet another example of a choice between doing anything versus doing nothing because the perfect answer isn't available.
Was this ever a problem for Microsoft, Google or Apple ? /s
A new sucker is born every minute. If the only time the name and shame is mentioned is when it happens, then those new borns will potentially never hear about it.
Why do they preach to the choir? Because that's how you get them to sing.