It ought to be a criminal offence to sell or import IoT devices that don’t meet specific security criteria.
