Smartphones at least have some semblance of security, whereas iot devices are a free for all

Do they?

I'd like to think that they should have reasonable security with my best interests in mind, but I really have no way of investigating what the baseband is or is not doing.