It's difficult to imagine many of the smaller IoT companies providing support for junk made back in 2010, but I do have a daydream law/policy compromise:

Require all hardware devices to have ongoing security support for twenty years. A company can opt out of that support after three years, provided that they open source everything down to the firmware, and provide documentation and any necessary jailbreaking tools.

also an amendment to bankruptcy law that requires open sourcing propriety digital tech as part of filing.