We're users not SECperts
Outside security professionals who knows what ACL, port forwarding, network segmentation, etc. mean, let alone their effect?
Most likely the user has no idea it's internet connected but "just turned it on and hooked it up to the network to get the license working / firmware updates."
Given tech items need constant updates, practically have to be connected to the internet to even boot past the license and registration screens, and a user base that have little idea what security means beyond yet another email+password login, it's hardly surprising IoT is a cess-pit.