> IoT devices aren't secure because their customers don't demand security.

Customers cannot evaluate security, just like in cars and many other technologies.

Vendors need to be held accountable and fined by 3rd parties.