>so why aren't the IoT hardware companies investigated or fined?
By whom?
Where do you imagine these devices are made / manufactured?
By whom?
Where do you imagine these devices are made / manufactured?
>Where do you imagine these devices are made / manufactured?
It doesn't matter. If Chinese, Thai, US, Spanic or Russian company wants to sell their device in Europe they have to comply to CEER (Council of European Energy Regulators) regulations, we need similar regulating body for software. Since we have lamps and phone chargers that don't blow power sockets and don't burn houses, we need software that doesn't blow Internet and burn cables.
If your country does need a make work program, hiring many postal inspectors wouldn't be the worst make work program yet. I think the TSA wins that :P