I should also mention that many IoT devices have default credentials which are a security risk. If someone is managing a webcam, changing defaults and securing access is critical.