Exactly, and it is not just this one case: serious, avoidable security cock-ups have happened every time a new class of device has been put on the internet, with the IoT DDOS debacle being perhaps the latest example.