That type of thing is why I threw in "and other similar measures". Of course there needs to be a basic security policy that is developed and enforced, and resel

That type of thing is why I threw in "and other similar measures". Of course there needs to be a basic security policy that is developed and enforced, and resellers / lessors should be responsible. We already have plenty to draw from, such as car/appliance recalls, large organization security policies, etc. There is a ton of low hanging fruit that could be easily dealt with quickly if there were political will.