Is this news anymore?
Here's a title you can reuse freely for the next decade or so.
(Startup/public/private equity owned) company <IOT device>'s collect data you don't want them collecting, use it for profit to your detriment, and didn't bother securing any of it because they don't care.
Each time it happens, it needs to be news to name and shame the companies. Unfortunately, once you've bought the product, it's game over for privacy. So this info needs to be explicitly available for each product/company so that when future buyers are researching, they might be able to stumble upon these articles.
Product reviewers need to explicitly state that the cameras/mics/whatevs of devices have been used for nefarious purposes other than what is advertised on the box.
But we should not just sweep everything under the rug because a couple of nerds "knows about it" because there's a heck of a lot more people that do not.