Is the manufacturer dealing directly with the customers? If so, I imagine that direct contact(assuming the things were re branded) is probably worth more in adv

Is the manufacturer dealing directly with the customers? If so, I imagine that direct contact(assuming the things were re branded) is probably worth more in advertising than the recall will cost them. Hell, I am going to consider that company positively, next time I buy a device in that price range. As for liability, I don't know about fairness, but I think that the isp is really the only entity prepared to deal with this sort of thing on a timely basis. All service providers know the"fix your shit out we un plug you " drill. It flows in both directions, too. Generally speaking, the more you pay, the more warnings and hand holding you get. But the point is that the isp is the first responder here; nobody else is in a position to stop an attack in progress. Of course, if you make the isp legally liable, fairness aside, internet access will cost rather more.