That's a viable solution. Except that it relies on an implicit: The end user must be able to identify the shit devices.

We could help that right away, by bricking all the vulnerable IoT devices. The media will then inform of what manufacturers and models were affected :D