If IoT was done responsibly, then we'd be more willing to try. The example was wifi connecting something that gave no benefit, and introduced significant risk (having a bad actor inside your wifi network). It doesn't take a scientist.

IoT could be done so much better. First, give some benefit (E.g. give you a service call when something went wrong).

And Why not use a simple VPN to the host? Encrypt the link some other way? Hell, require a password?

I've programmed IoT device firmware for clients. I put in security - they want it removed. Because it makes installation harder for their staff. No profit in it.

I'd run from any IoT device today. Until we have some legislation or accountability or even UL rating for security, there will be no security at all.