Consumer-based IoT devices are often less secure than systems built for traditional desktop computers. Which of the following BEST describes the reasoning for this?

IoT manufacturers routinely sacrifice security practices - such as unique default credentials, firmware signing, and vulnerability patching pipelines - to cut costs and ship products faster, resulting in devices with fundamental insecurities built in by design. This manufacturer-level disregard for security is the root cause, making devices difficult or impossible to adequately secure even when administrators attempt remediation after deployment.

Administrator difficulty in applying uniform security standards is an operational challenge that follows from insecure devices already being deployed, not the underlying reason devices are designed without adequate security.

While some IoT devices have constrained hardware, many have sufficient processing capability to support basic security controls but still ship insecure because manufacturers choose not to implement them as a cost-saving measure.

Regulatory requirements do not directly cause IoT insecurity - many jurisdictions do mandate minimum security standards, and their laxity is a secondary factor compared to manufacturer economic priorities.