After a period of time of coming out of the box and set to open, followed by predictable passwords, followed by a lack of rate limiting on WPS and vulnerable TR-06 setups and the always present mistakes in router firmware allowing remote exploits.

Now if only we could get a standard router manufactures to stick to :-P

Sadly I can see IoT having to go though the same slow learning curve.