There is a great point here you haven’t made yet. It may seem trivial for those of us on HN to block IP devices from the internet, but the average user will no

There is a great point here you haven’t made yet. It may seem trivial for those of us on HN to block IP devices from the internet, but the average user will not know how to do that effectively. They are also the ones who’s devices probably remain on a botnet undetected by their owners. That said, most hubs (required for these types of devices) connect to the internet by default anyway. It does reduce risk a bit as vulnerability in a node isn’t exploitable remotely.