"There is more chance of the second coming of Jesus than getting an update for IoT tat."
True, but now there is official advise out there so that makes it easier to return for a refund (or sue) when it's blindingly obvious that the manufacturer didn't even take reasonable measure to test the security of the device. The majority may not even notice or care, but some will. That's also likely to make the news too, so more become aware. Especially if it leads to class actions and product recalls.