"Kleiner said the Commission would encourage companies to come up with a labelling system for internet-connected devices that are approved and secure."
Maybe it is time to quote Bruce Schneier again: "Security is a process, not a product."
Given how many C and D labelled refrigerators are still being sold, I wonder how many people would still buy those insecure IoT devices. Hey, D is so much cheaper than A.