A glaringly inadequate recommendation for security on the "internet of things".

What it says is true enough, but it only considers security against third parties, and totally ignores the issue of security against the manufacturer. That's a glaring omission, because the software in these devices is nearly always proprietary. Nowadays it is not merely conceivable that a proprietary program is malware; it is standard industry practice.