So tossing out an idea:
What if all manufacturers had to classify their product into internet connected i.e. smart or not. We mandate that manufacturer has to support updates for minimum 5 years or firmware source goes public. Have them put firmware source in escrow as well as have a way to update it.
If a manufacturer wants to reduce their liability then they have to release something to make it semi publicly supportable. With AI agents these days patching the firmware might one day be trivial.
Put some penalities with teeth behind this and maybe manufacturers will think twice before making everything smart.
You suggest that supermarket fridges should not be connected to network?
If my internet connected fridge can't talk to the supermarket's internet connected fridge, how will they figure out when I need more milk?
Not any of the controls. At best they should simply report temps and operational status.
I think he suggests that manufacturers should be responsible for keeping their products reasonably secure.