Comment by rlpb

This may be a joke, but it's notable that the EU has the Cyber Resilience Act, which makes producing devices with this kind of lack of security illegal. Broadly speaking it takes effect from December 2027.