Re: "smart home product manufacturing 101"
It's not that they don't do penetration testing they just think that by employing devs they are covering themselves without realising that pen testing can be a whole other field, plus it's about costs, do you want to pay x for experienced competent developers that think of all issues or do you want to pay y for cheap devs just out of HTML school that can just about do the job using the internet to write the code? y < x by a magnitude.