IoT at the moment is just a collection of "you can do this now !" ad-hoc non-features, like lightbulbs with speakers. The issue being, of course, that makers are desperate to have something they can show as a selling point, whereas security is not easily visible and is expensive to implement properly, so it falls by the wayside.
Even here, where the maker thought of using SSL (good show), they failed to secure the chain of information completely, thereby leaving a hole.
Since IoT is absolutely useless at the moment, and anything "smart" is by definition something that phones your private life to the mothership, I am staying well away from all this hoopla for the forseeable future.