Forgive my redundancy as I am surely saying what has already been said in other comments I've not yet read. I have one cast-iron, non-negotiable relation with

Forgive my redundancy as I am surely saying what has already been said in other comments I've not yet read. I have one cast-iron, non-negotiable relation with IoT objects: No IoT device should ever hide what it is doing from me. If it lives in my house, car or environment it is not acceptable for me to install something which then tries to hide its operations. I don't care who it's made by or how much they think they are "helping me". Whether by encrypted tunnelling, side channels, secure enclaves or whatever devious shitfuckery, if I can't put Wireshark on my network and put a name and purpose to every operation then I'll track down the origin and eliminate it. Further, I am simply not interested in any "arguments" claiming this is "necessary". It is not. Profit, spying and control are always the ulterior motive, and they are unacceptable. Do not allow anyone to pretend they are "security" and hide behind that word. Security for whom, from whom and to what end.... Also there should be no "embedded function" which I cannot turn off with confidence, perhaps by a physical jumper or switch. No IoT device should ever reset itself to insecure defaults. Thanks for enquiring and good luck in your difficult work.