They’re all running old software, most will never see updates, most of the people building the things don’t know or care about proper security, most people buying them don’t know this is a problem. Today bad security is generally cheaper than good security. In the future, good security will be cheaper to build, deploy, and run that bad security.