Until there are criminal penalties for data leaks and badly architected or insecure devices, there will be no IoT devices in my home. When the incentives are purely to lower costs, of course security will be neglected. And using a separate network is a very poor stopgap that might help, but is not really a solution in any sense of the word.