Antipatterns in IoT security

> The costs associated with securing these devices are an externality in economic terms

These devices will never be secured, if it's up to the producers and the consumers only. The manufacturers are not interested in the security of their customers, so they won't pay. The customers -- consumers of these mass-produced devices -- are also either totally uninterested in their own security, or -- on a grand scale -- aren't interested in it enough to pay up.

The consequences for society will be terrible, of course. IIRC, Schneier keeps saying that rules & regulations should be imposed by the local governments on the manufacturers / distributors. My comment is that it should occur similarly to how the safety of plain electric devices is enforced. This would effectively force the consumer population to pay for their own security, which would be better (and cheaper) for society at a large scale.

I guess this is another debate to be had between the left and the right (applied to your local government). :/