There's a smart camera on someone's porch right now that hasn't been updated in over a year. It still works fine — still streams video, still sends alerts — which is exactly why nobody's thought twice about it. That's the quiet problem with connected devices. They keep functioning long after they've stopped being properly protected, and most people have no way of knowing the difference just by looking at them.