Re: "what kind of security review the products go through"
There needs to be something like MISRA for IoT and it needs to be now.
Not that that would stop cheap Chinese imports, but look, hey, here's a reason to buy our expensive Internet-of-Tat lightbulb... it won't look through network drives or proxy your entire LAN traffic to the dark web if someone sneezes at it.
Biting the hand that feeds IT
