How about (3) don't ship devices with default passwords ever or face public flogging. Of course this will not change until users care about privacy and securit

How about (3) don't ship devices with default passwords ever or face public flogging. Of course this will not change until users care about privacy and security and include it in buying decisions. I'm not holding my breath.