Maybe we could go a bit further and say that a proven security breach (i.e. an unauthorized person actually accesses your device) carries some concrete liability, for example $500 plus a refund of the purchase price?<p>It&#x27;s a bit like the laws for junk faxes or illegal telemarketing calls. You don&#x27;t have to take them to court or prove actual damages, you just press the &quot;statutory damages&quot; button when an actual violation occurs.<p>I could see some difficulty arising from people who are breached not because of some fault with the product, but because the people made their password &quot;password&quot; or whatever. But maybe this would just encourage manufacturers to make it difficult to set up their devices insecurely.<p>There might be problems with people knowing that they&#x27;re breached. To combat this, you might make the $500 (or whatever amount) payable to anybody who accesses such a device in good faith. These &quot;find an insecure web cam pointed at a baby&quot; web sites would go from voyeuristic amusements to money makers.<p>Just some random ideas....