Link encryption and authentication is pretty much "solved" in that we have the components we need already. Then there's the issue of code bugs and lack of updates - I think this should be solved in most cases by devices exclusively talking over a filtered API via a trusted gateway to prevent exploit attempts from succeeding.