Just let them. The sooner people realize that buying a cheap $35 smart watch, or embedding the cheapest Android tablets into walls, or turning off your heating completely after the battery in your smart thermostat dies... the sooner we'll be in a place where the security of IoT is actually considered, not only as important, but as crucial. Then, we can have nice things.

Maybe we'll end up with a standard certification equivalent to UL or the green padlock next to the URL. Probably about 5 years in the future.