Re: they kinda missed a trick here?
The protocols, maybe, but they say nothing about the keys. Meaning, what's to stop all your tat from simply having public encryption keys and an always-encrypt policy meaning the only entity who can read and interpret the data they send are the big boys with the private keys? And if you block the connection, it assumes something is wrong and stops working, which is probably part of the spec, too?
So basically, it's a variant on Tivoization. Everything in the device is open, including the public key. But good luck trying to keep a lid on the data mining without ending up with a brick.