
Update and IoT in same paragraph?
How many vendors will bother?
How much stuff can be updated even by the vendor?
If if can be updated remotely with no user intervention, that's a vulnerability. Yet many of these things have no sensible user interface.