Re: "maintaining continuity of service and security if a vendor goes under,"
The solution fixes the security issues, but doesn't address the lifecycle issues of either vendor/middle-person/device.
But that's ok.
I'm not expecting one solution to fix everything. In fact, it's better this way. A solution that fixed everything would be some thick manual that IoT manufacturers couldn't implement.