I read about proposal to prominently put expiration dates IoT devices, to show how long it will be servered with security updates. That could be interesting and also raise awareness.
Not really. Don't forget that for the longest time home routers shipped broadcasting the default SSID with no password. Now they come preconfigured with a locked-down SSID and password (though the management interface is still usually behind admin/admin or an equivalent). Security isn't on most people's minds -- it has to be built into the product from the get-go to get the largest reach.