illrigger

tht said:

I, like 99.9% of the other people in market, don’t have the time to go through a list of security practices. 

That's what everyone says until they spend months of their lives dealing with the consequences of identity theft (or worse), friend. "An ounce of prevention is worth a pound of cure", blah, blah, etc.

Ugh. What a load of clickbait BS. How many attack vectors are coming into any given platform doesn't matter nearly as much as how effective those vectors are, and the most successful ones are hitting every platform all at once.

I do information security for a living, and I will tell you one very important thing: all it takes is one successful vector, and you are hosed. It doesn't matter how much more the other guys are getting attacked than you are, you still need to act as if you are constantly being attacked - because you really are. That means:

• Get everything that talks to the Internet (hardware and software) up to date as quickly as you can as updates are released. That includes your router!
• Replace that router that you "got a great deal on" back on Black Friday in 201x with a modern one that is well reviewed by a site that primarily/only reviews network stuff. If you are unsure, just get something from Asus that has at least 3.5 stars on Newegg.
• Limit exposure from the outside as much as possible and turn off uPnP on your router.
• Practice network isolation: keep equipment that doesn't need to be on the same network as your personal date on its own subnet, especially IoT stuff like lighting hubs and smart home gear that doesn't get updated often. 
• If something you have connected to the Internet hasn't gotten an update in a year, consider replacing it entirely (once again, that includes your router!), and don't buy no-name stuff from Amazon, Wish, AliExpress, etc., and put it on your network with the your PCs. Getting "Linarsefft" smart bulbs because they are so cheap is a BAD idea - they will never get updated and will almost certainly have some sort of security flaw in them eventually.
• Stop going to that site you know you shouldn't be going to. You know which one I am talking about - it's the one that you immediately thought of when you read that. Stop going to the rest of the ones you know are risky as well. Or, at the very least, build a VM, put it on its own network, and use that to go there instead.
  

As a reader, you should be finding articles like this offensive to you. They play to your ego to make you feel superior so they can make a bit of money from your clicks, but they are actually giving you a false sense of security. You ARE being attacked constantly and relentlessly - your network is getting pinged hundreds of times a day from countries far and wide (and by that I mean mostly Russia), looking for their way in. Don't listen to anyone who tells you you aren't, and act accordingly to minimize the risk of them actually getting in.

I paid less for my Aqara camera hub plus one of their leak sensors than just this sensor costs, and I can run 100+ various sensors (most of which cost less than $30 each) from that one hub. Eve's stuff is great, but when it comes to sensors having more of them everywhere you need them is key, and you should be looking at the economy of the system as a whole rather than just the parts.