@hacks4pancakes@infosec.exchange The problem already is in the devices firmware themselves. Usually they have no permission model beyond everything or nothing. You want to read temperatures? Fine. But across exactly the same bus you get access to setting the temperature, or even uploading new firmware entirely with usually the thinnest of default passwords and encryption that would not have passed muster in the Napoleonic wars.