If they were the exception I'd agree with that, but near every post I see on HN about IoT devices is either a way they're easily hacked, phoning home to God-kno

If they were the exception I'd agree with that, but near every post I see on HN about IoT devices is either a way they're easily hacked, phoning home to God-knows-where servers with no documentation as to why they're doing it and no way to stop it, or how the default configuration broadcasts information to the internet in a way they can be easily found if you know what to look for. Right now it's blatantly obvious that to the vast majority (if not the entirety) of IoT companies, subscriber counts and ease of use are prioritized way, way higher than anything you could even call security.