The problem with IoT security is that while people had insecure devices, they would only have a few of them and they'd only be running for a few hours per day. With IoT, people now have a dozen devices that are running 24/7.
There is also the problem that users might notice something happening on their devices were there is no way to monitor an IoT device (unless you are doing a packet dump of the network and know what you are looking at...)
Biting the hand that feeds IT
