IMHO more disturbing than the lack of security is the fact that people will willingly put these products in their house that phone home to a central database.

I'm not into the whole IoT thing but if I really had a need to control something from anywhere on the Internet, it would not rely on a centralised third-party service.