Regulation, yes, like making someone responsible for these devices (owners, network operators, manufacturers, anyone would do, really). The 'internet of corporate things that the user is locked out of' aspect of the GP's comment is a red herring.