Unless we're talking about base stations that connect to some online cloud service so you can control it from work, I want less security, not more. Really, the job of security should be left up to the router/gateway between my network and the internet. If the attacker's on my local wifi, I'm already hosed anyway.
More importantly, leaving these devices open is good for extensibility. If the devices become secure, they become locked down. As it is, if my smartbrand a doorbell goes off I can have it tell my smartbrand b lights to turn on, etc. Security will solve a problem of a hacker getting in, but you can bet we won't get the keys for our own legitimate use.
Secure your network, and let the devices do what they do best. Also don't connect them to the internet because damn, that sounds like a mess waiting to happen, security or not.
Asynchronous inputs are at the root of our race problems. -- D. Winker and F. Prosser