The Problem with VW is: They claimed something, whic hthe customers cared about, and they lied about it. As a matter of fact they actually advertised with being environmentally friendly. If the customers did not care about the enviroment it would be a different story.
On which IoT product have seen explicit traceable claims about Security standards on the package or in the advertisements? Have you seen somebody saying: Oh, this setup procedure is safer because I understand i have to type the number on both devices to pair, so i am happily doing that? Or was it more like: "Can you believe I had to press the button for 20 seconds to set it up, worsk so much better if the app just finds everything automatically, and it's cheaper, too"
I hope you get the difference.