Without mechanisms to report, manage and resolve vulnerabilities, the security of consumer IoT products will diminish over time – and the likelihood of attack or abuse will increase.