This is where device profiles could help. If enough devices register
profiles with the local router, at some point the router's default
could be closed, so devices with no profile can't talk to the outside.
That would be nice, but a manufacturer who can't be bothered to take even the
most basic security precautions certainly isn't going to implement this,
either.
They will if the routers start rejecting their traffic.
The only cure to this will be changing the law so that the directors of the
companies that ship massively insecure devices like these are personally
liable for all the financial loss attributed to their products. Bankrupt a
few companies' board of directors and you'll start seeing things change in a
hurry.
Good luck with that.
R's,
John
