Ok, so which safety measures do you mandate? Oh, I know! How about a browser that does not allow direct navigation from external to internal addresses? Ah, wai

Ok, so which safety measures do you mandate? Oh, I know! How about a browser that does not allow direct navigation from external to internal addresses? Ah, wait. It still does not quite work for services that have a public IP address. So where do you go from there, a new protocol that has capability handling and external access is disabled by default? Forcing companies to issue recalls for buggy hardware and firmware could probably do the trick. Note the expense and the fact of insufficient dissemination of found issues combined with lag to fix them.