The Security On Most Devices Is S**t
This isn’t just IoT, it is pretty much any device in my house, and quite probably most in the office too. Think of it this way 1. The default software they are shipped with will have some security holes in it. 2. Even when they patch (“some of”? “most of”? definitely not “all of”!) these devices, there will still be unpatched devices in the Amazon warehouse. Which one did you get? How would you even know? 3. Assuming you do know that you got an unpatched device, did you actually get the correct patch/revision to update it? And what about future patches? 4. Auto-update ? WTF even is that? And even if you do know what it is, do you trust it to work? 5. So you do trust it — are they updating on a regular schedule? Seriously, most phone manufacturers can’t even be bothered to update any phone more than a year old, and let’s not even get started on your cable modem/router… And all this is assuming that you have good security practi...