@matigo I can summarize most of those articles as follows:
The people who develop IoT devices, for the most part, do not adequately understand security. The people who buy these devices generally don't understand security either, and don't care to. The people who do care and could do something about it are in the minority. They are also, for the most part, not in a position to do anything about it.
The reality is: until something happens that turns those theoretical and very plausible threats into something that actually has catastrophic impact, the situation is unlikely to get measurably better.