Part of the issue here is that many IoT products use web services as part of functions that don't need them at all. The cynic within me suggests that this is a

Part of the issue here is that many IoT products use web services as part of functions that don't need them at all. The cynic within me suggests that this is an intentional choice to allow for enforced obsolescence. Beyond this, apps can be updated to remove or decrease support for older devices, and here our focus on trying to insist on auto-updated apps to fix security problems, or on apps that are designed to receive server-side updates, causes significant problems. At some point, for example, I'm going to have to stop using the Philips Hue app, because I have an older Hue bridge. Support for the older bridge was at some point removed from the main app (and accompanied by an advertisement for the newer bridge), and moved to a legacy one, which seems to have a significantly slower response time. Now the legacy app has popups noting that web services will no longer support older hubs, and other services will be degraded... along with advertisements for the newer hubs. I expect at some point the app will simply be intentionally broken, entirely. Fortunately, in this case, I can just use other apps, and other systems entirely, if need be, and at least the older hardware supports entirely local APIs (unless Philips decides to push a firmware update to break them?). I'm certainly not going to replace hardware that works with new hardware that provides no benefits, and throw away the old hardware; this would make no sense.