Isn't that partially because even your stove is now connected to the Internet? The attack surface changed from "when I connect my USR modem" to "someone can portscan all of IPv4 in reasonable time"

I do gravely miss the ability to actually have the bits, and will take any steps I can to grab an offline installer if offered