Basically, neither the buyers nor the sellers of these devices care about fixing the security problems, since the victims are usually somebody else. So the only way to solve them is via Government intervention. But this has to be done with international cooperation--no single country can do it. <https://www.schneier.com/blog/archives/2016/10/security_econom_1.html>