Force the manufacturer to release their source code for any server-side component of any product. Or API specifications and any HAB keys needed to boot new firmware on the device.