content: It doesn't really matter.  I did an audit on one IOT chip and found a severe flaw within a few minutes without needing the actual chip (the software was enough). Lots of devices use the same firmware keys for everything - I have hardware that can extract those secrets from just the RF or power usage. Other devices have fun flaws in the networking stacks.  When your device isn't updated after 5 years, some device gets hacked that uses the same software and you're on a botnet.