Comment by mzajc

> If a wifi password is required to make full use of the device, I will return it.

This is one of my favourite uses of OpenWRT, or any other firmware that gives you proper control over the router - for WiFi-networked IoT devices, I set up a separate wireless network with no WAN/LAN access and client isolation. I can connect to the device, but it can't connect to WAN, any other devices on the IoT network, or my LAN.

Of course this won't work for cloud-tethered devices, but many will expose their functionality directly over network.