IoT vendors don't think, which is why the crap they sell is vulnerable to so much exploitation. Network operators should know better than to put cell radios in

IoT vendors don't think, which is why the crap they sell is vulnerable to so much exploitation. Network operators should know better than to put cell radios into devices you know will be compromised in a year or two. Hell, the solution sounds pretty simple to me. Network attached devices must be openly disclosed with open source hardware and must have standardized wired update and control mechanisms. That way consumers can make intelligent decisions to buy products that can see long term support by their communities, because companies absolutely won't do it (and because they are international, you cannot really bind them to support terms of contracts - these negotiations have to happen at the import level, and nothing really stops them from dropping products a year down the road from support and bribing the right people / dissolving and reforming the company to circumvent consequences - but you can force them to disclose source and hardware architecture, enabling the consumers to maintain security themselves).