Step One:
Step Two:
Shit shit shit. We need expertise in IoT security.
In a sane world they would take small topics like security in an connected and always-on society more serious. And would have already an IT sec team in place before shipping b0rken dishwashers.
And the regulation systems in place are not working. No light bulb can be distributed without passing lots of safety standards. IT security? The few (de-facto) standards are protecting mostly business models (like secure boot. or DRM.)