"Of course your random manufacturer of badges for Chinese made IoT kettle does care about it security and knows how to do it properly."
Remember the bit about a CyberUL? If they wanted to get them to market they'd have to know, just as how they should know about electrical safety of said kettle.
OK, dangerous goods do get onto the market but when they do and the dangers are discovered the local Del boys vendors get stock seized or maybe they get prosecuted and the public gets warned.
Biting the hand that feeds IT
