Each time it happens, it needs to be news to name and shame the companies. Unfortunately, once you've bought the product, it's game over for privacy. So this info needs to be explicitly available for each product/company so that when future buyers are researching, they might be able to stumble upon these articles.
Product reviewers need to explicitly state that the cameras/mics/whatevs of devices have been used for nefarious purposes other than what is advertised on the box.
But we should not just sweep everything under the rug because a couple of nerds "knows about it" because there's a heck of a lot more people that do not.