Although we should emphasize securing consumer devices by default I don't see any other way to motivate companies to secure devices having either the FTC or a class action lawsuit to implement security.