This is why IoT Should NOT Mean Internet Connected
Fitness Tracker plus Heat Map gives away military secrets

From a ZeroHedge article Fitness Tracking App Accidentally Reveals Secret US Military Bases, CIA "Black" Sites.
An interactive online fitness tracking map published in November of 2017 which compiles a running history of the location and routes of 27 million fitness-device users has unwittingly revealed the location, staffing, patrol routes and layout of U.S. and foreign military bases around the world.
It seems as if STRAVA Labs has basically done the thing that I do not like about IoT. I believe that IoT should be ioT. Not an Internet of Things connected to the Internet, but simply an internet of Things. When you add Internet connection or require Internet connection, you open yourself up to data integrity issues. Your data is no longer your own, when you store it up in the cloud.
First, it was probably stupid of military people to use the fitness app in the first place. It was also stupid for it to be allowed to be connected to an on-line database. Somewhere, logic was lost in the chain of command for allowing these devices for people in the field.
But, beyond that, this issue can be connected to other Internet connected devices. Ring, is another example of people putting convenience over security. As far as I know, there are no reported incidents of people hacking into Ring in order to break into someone's home. But,then again, it would be to Ring's benefit to let people know.
Alert! My Ring Doorbell got hacked today afternoon 2:00 pm. Hacker took control of my door bell and creates a havoc. Asks me for money and cars.Crime reported to police. Ironically Ring support asks me to reset the password and then deletes this video from my account.
Maybe Ring has improved things since this 2016 C|Net Article : Ring's smart doorbell can leave your house vulnerable to hacks
But, it doesn't really matter. If you use Wi-Fi or BlueTooth, if you store your data in the cloud or if you allow for any sort of connection that you don't control, you will be vulnerable. And of course, we even know that cryptocurrency exchanges and wallets can be hacked.
Unfortunately, I fear that the real solution to IoT will not come. Having control over your own central controller and only allowing for software updates is not going to happen. At least, it won't happen with commercial products. And who knows if an Open Source project that you can do yourself would be any better, if you didn't understand everything completely.
Let the positive energy sing!
More Power to the Minnows!!
Trading on Bittrex and Binance
HODLin’
Stellar Lumen(XLM) -- Cardano (ADA) -- Digibyte(DGB)

This is indeed a problem in our world.
When marketing doesn't understand what the engineers said, and blow them off.
When winders makes a trade off that will destroy all net security, (again, for marketing reasons)
When people do not understand that a lock is just to keep the honest people honest.
Maybe, someday when everyone rises to a level that they know messing with someone else will karmicallly come back to bite them. Then, our IoT might be ok as things stand.
But, there is no security. There isn't even tools available to see your security. Your phone is not yours, it is rented from several other companies that make money on your information. And this is the way of all software (that is sold)
I don't know how this will work out. I can't even get people to invest time into backups. And they have no clue when you talk about security. You cannot see the holes in your firewall, so they must not exist...
Yup. The heart of the problem.
the only solution is tie rods.
once you get away from a direct physical connection the dogs of war are unleashed.