You didn’t mention device security once in this entire article. Until you start addressing security *first*, I will not buy your product, and I will strongly discourage my organization and everyone I know from buying your product.
Security means, among other things:
- Secure, automatic updates over an encrypted channel
- No default passwords or debug backdoors
- Stop using ancient obsolete communication technology (like FTP and telnet). Use secure communications and *don’t* roll your own: e.g. Use SFTP, SSH, HTTPS.
You’ve got away without addressing technology because it hasn’t paid to care about the security of your devices once they’re in the hands of your customer. Those days are over. The Mirai botnet and others is the result.
Do. Security. First.