Comment by thraway123412

I think legislation is the only way to fix this :(

Require owner's/user's consent to connect. If no consent, no connect. Device's offline capabilities must still work and it must not nag you or otherwise use dark patterns to force a consent out of you.

That would be a relatively minor extension to gdpr.