Source code escrow agreements are reasonably common. When a startup receives an investment from BigCo, it comes with the condition that BigCo gets a perpetual license to the source code / IP if the startup fails.

It would be straightforward to mandate such agreements be included with all IoT device purchases.

Ideally, they'd also be triggered by acquisitions or modifications to privacy policies. I can dream, right?