No Teeth in UK Internet of Things Security Report

The UK government's draft "Secure by Design" report calls for a fundamental shift of IoT security responsibility from consumers to manufacturers via a 13-step Code of Practice (e.g., eliminate default passwords, vulnerability disclosure programs, secure data storage, remote updates, data deletion). Security researcher Ken Munro praises the focus but criticizes the draft as lacking enforcement and regulatory teeth, calling it a missed opportunity to mandate meaningful change.