Although this article was written almost two years ago, it is even more relevant today. The number of IoT devices continues to grow and yet the industry still has not provided an answer to Bruce's concerns. Who will take the lead on this and will governments be forced to step?
We're at a crisis point now with regard to the security of embedded systems, where computing is embedded into the hardware itself—as with the Internet of Things. These embedded computers are riddled with vulnerabilities, and there's no good way to patch them.
https://www.schneier.com/essays/archives/2014/01/the_internet_of_thin.html