IoT Security is Hard, but Simple