Schneier has recently argued that there is a missing market for IOT security in the sense that devices manufacturers have no incentive to patch impose external costs on society, and that this might be hard to fix without regulation.

https://www.eweek.com/security/ibm-s-schneier-it-s-time-to-r...