Does any company or person do privacy audits of these smart home devices? At the very least doesn't seem difficult to sniff packets sent out on the home network

Does any company or person do privacy audits of these smart home devices? At the very least doesn't seem difficult to sniff packets sent out on the home network? Seems like it is generally accepted that these things are a privacy nightmare but haven't seen a lot of actual analysis.