[droopyEyelids]

> Do any "smart" devices not try to connect to remote servers, automatically, without asking the user for permission?

I believe this is the point of Apple Homekit. And probably whatever Google has in the works will follow the same path.

Your IoT devices only talk to your Apple TV, and the Apple TV talks to Apple which provides the cloud-connected app on your phone.

That way the million IoT vendors shouldn't have to worry about security as much, becuase their devices are behind your NAT and communicated with through Apple's security.