Honestly, I think that IoT manufacturers should be required to provide open APIs. Preventing third-party developers from interfacing with smart devices, especially after they've already been sold to consumers, seems dangerously monopolistic.
To be clear: I want a legal requirement. Like any industry that has vastly expanded in power and societal influence, the tech industry may ultimately need to be regulated for the greater good.