
Give yourself an uppercut
While I agree, the reality is people are lazy, ignorant, and generally not engaging the brain as often as they should.
The fix here is to not design an iOT where security is not enabled by default.
A lot of the time, the business just wants to minimise support requests from their customers because those customers cannot be arsed to RTFM
People still use the same password across multiple online services, the writing has been on the wall for a while now.
Did I mention people are lazy and ignorant?