Really? Then you will get extremely slow progress.
I'm not exaggerating. Medical devices are the extreme form of this.
Look at the (some would say lack of) progress is creating an artificial pancreas for Type-1 diabetes, for example. The progress has been so slow that Type-1 sufferers with tech knowledge have been reverse engineering existing pumps and sensors in the hope that they can hack them and break the bottleneck themselves.
Or, alternatively, everybody will release a product and almost immediately wind up the company so that you can't get at any of the profits or use Hollywood accounting so that there magically never are any profits.
Or are you willing to make security problems a criminal offense? (Now there's a fun can of worms--write a bug, go to jail).
Medical devices kill people when they break. Hopefully IoT devices don't, and the liability will be correspondingly lower.
If your company makes no attempt to patch vulnerabilities, and your devices become one more bot in the botnet, there should be some liability for this.
Liability?