[MarcoPerazaFCC]

This is something that has us worried too. The FCC took some action on this issue last year by outright banning equipment from certain companies (e.g. Huawei), but we haven't even scratched the surface of this pervasive problem. I really encourage you to share your concerns through an official comment. Maybe the label can include commitments about the provenance (and, e.g., control of signing keys) of the on-device software and associated cloud services?

[0xDEF]

Look into the ESP32 chip. It's by a Chinese company and is used in almost all cheap IoT products.