I agree on secureboot :( one thing: > Luckily IOT-vendors are absolutely abysmal at protecting their devices so I doubt we'll see too many devices locked down

I agree on secureboot :( one thing: > Luckily IOT-vendors are absolutely abysmal at protecting their devices so I doubt we'll see too many devices locked down that weren't already. it is either compliance or no CE stamp (if a product does not meet safety requirements they have to remove connectivity or take it off the shelves). And either they are already scrambling because the cost of this has already sunk in, ... or they are in for a surprise pretty soon because becoming compliant isn't a one-off activity but means restructuring their entire processes (e.g. test automation to maintain that compliance)