Maybe you would care if that website was yours. These attacks do not discriminate. If your Wifi connected lightbulb (just writing that makes my eyes roll back) is part of a botnet, one day, it might just take down something that you actually need.

That said, them being connected to the internet isn't an issue itself. Make all your IoT devices connect through one central gateway (in your house) that controls all of them and suddenly instead of 20 devices broadcasting on the internet you have a single entry point. Obviously this entry point would be the target of many, many attacks, but securing this one gateway (that would be easier to update than your lightbulb.) is much less of a complicated task than securing all twenty.

But you would care if the lightbulb was caused to heat up and start a fire.

Sure, but manufacturers have adequate incentives to avoid that, because they will be held liable.

It's way more likely to affect you than that it making any relevant harm to anybody else.

Do you care about thieves checking your lights from anywhere on the city? And what about your lights launching attacks against your other computers?

> Do you care about thieves checking your lights from anywhere on the city?

Well, this article (and discussion) is mostly about these devices being sources of DDOS attacks.

> And what about your lights launching attacks against your other computers?

I thought my comment was pretty explicitly clear that most people would not care at all, even if they knew.