Question borne of ignorance: Have any of these vendors opened themselves up for any legal liability for these shenanigans? Also, if some small developer wrote

Question borne of ignorance: Have any of these vendors opened themselves up for any legal liability for these shenanigans? Also, if some small developer wrote a mobile app to control such devices, would they also see themselves liable?