Bluntly put: Making it harder is not security. Security is not a pile of obfuscation and hoping it will make things difficult enough. Lets forget your analogy

Bluntly put: Making it harder is not security. Security is not a pile of obfuscation and hoping it will make things difficult enough. Lets forget your analogy with stealing car parts. We can just do that :) Lets have the realistic or real world settings where we are all purchasing incredibly cheap IoT devices that bring us all kinds of wonderful functionality. Businesses, factories or brands making incredibly cheap stuff are not very stable. They make a popular widget for a while then dissolve and everyone moves on. They can also move on to the next version of their product abolishing support for previous version. If build reasonably well and used rarely or carefully such devices can last for many decades. It thus is guaranteed for a large percentage of the devices to not have a single authorized repair provider for the longest period of their usage. Real security holes will be found, bugs will be exploited, they will be easy to find online and come with a life time guarantee to work. The analogy would be a catalytic converter that might explode. You shouldn't drive this car in your drive way. You should buy a brand new one from the same brand! But doesn't that have the same catalytic converter? Maybe! But as long as you don't know about it you are safe! Their 15.4 has just been released and non of them exploded! Stop being poor!