Patch? HOW??
Patch all those Idiocy-of-Things already out there in the wild? How? How would I force an Internet-connected toothbrush to update? Press the button 13 times with a pause between 10 & 11? Or do we rely on a Push from the vendor, which just means other security flaws?
Tbf I do have a couple of remotely-accessible radiators in an Airbnb/rental flat I own, mainly for the fun of sitting on my sofa and turning the heating down on the fuckers energy efficiency. Their software does provide a very obvious and easy way to update the firmware, but of course most users' reaction will be "what's firmware?".
Gaah. Intractable problem, caused by numpties who think that just because something can be connected to the net, it should be, regardless of use cases (or lack of).