Unluckily, that's exactly what the IoT industry (and not only) hopes...
.... to sell you again and again the same device because it will never be updated.
So the only useful line of defense is not to buy them in the first place. Especially if they don't work at all if not connected to the mothership.