To save others the trouble, it's just boring recollections of rookie mistakes the guy made many years ago, and some general mumbling about old IoT stories we read last year to make it seem vaguely relevant.
Perhaps instead of endless stories about how bad IoT is, maybe we could think about ways to make it better. I actually build IoT devices for a living (for the water industry) and security is something we think about. We came to the conclusion that, while convenient, over-the-air firmware updates are a bad idea, for example. Aside from the risk of someone abusing that mechanism, the potential for it to fail like it did with NEST is too great. Firmware updates are to be avoided if possible, or done in person.