California just raised the baseline for security in the Internet of Things... to a degree. Governor Jerry Brown has signed very similar Assembly and Senate bills that require hardware makers to include "reasonable" security measures for connected devices. All gadgets will require at least some kind of protection against unauthorized data access. If they connect to the internet, they'll require either a preset password "unique to each device manufactured" or else the ability to generate a new authentication method (such as a custom password) on initial setup. You shouldn't see hackers compromise legions of security cameras or routers simply because they're using the same default password.