Companies like Qualcomm, Texas Instruments, Siemens, etc. haven't really had the trial-by-fire experienced by companies like Microsoft, Google, or any of a hundred consumer-facing service providers. How many embedded controllers are out there waiting to be pwned by something even half as sophisticated as Stuxnet?

I personally hate Windows and most other Microsoft products but it's undeniable that the asskicking they got in the 90s and early 00's has really transformed Microsoft's outlook on security.

Half these companies are still in the security-by-obscurity mindset. I'm not optimistic for the next decade of the so-called Internet of Things.