[tapoxi]

It's controversial, but I kind of agree. You need FCC approval to broadcast a radio signal due to the risk of interfering with other traffic, and you should have FCC approval that your IOT device meets minimum security standards before being sold.

[dwheeler]

It may be controversial, but I think there ought to be a law. Some ideas: http://www.dwheeler.com/essays/law-security.html