Regulating IoT is going to be impossible when tiny little devices can be shipped undeclared. Even if it could be policed effectively it would destroy the econom

Regulating IoT is going to be impossible when tiny little devices can be shipped undeclared. Even if it could be policed effectively it would destroy the economics of some of these cheaper devices. Instead, how about ISP supplied modems/routers have sensible defaults(and have the admin password reset)? Much more cost effective.