> "So, why is IoT security like this?" Cheap consumer IoT devices cut corners on everything so the developers too just do the absolute minimum to make it work,

> "So, why is IoT security like this?" Cheap consumer IoT devices cut corners on everything so the developers too just do the absolute minimum to make it work, security be damned. For industrial / commercial IoT devices, you have both low-level (e.g. device driver) devs who know squat about running a secure network making design decisions and customers with extremely low quality IT staff who also make poor design decisions with respect to security and also ignore firmware updates even when they contain security fixes. It's just a mess all around.