> Unfortunately users are very adverse to learning anything about how their devices work, so I don't have any idea what can be done about the problem.

They are.

But there's precedent: Manufacturers spent years shipping consumer routers that worked out-of-the-box with default wide-open networks with SSIDs like "NETGEAR" or "linksys," which was gloriously insecure.

Some folks were sure back then that this could never change, but it has changed. These days, such devices generally reasonably-secure by default.

It can presumably change for Matter and IoT, too.

(Except the rabbit hole is kind of interesting, because... The usual method of setting up a Matter device means scanning a QR code with a pocket supercomputer to begin the process of connecting the Matter device to whatever wifi network it is that the pocket supercomputer is currently using.

And this does work for getting a Matter device online, but it doesn't allow for easy separation of network roles.

So the routers will need to change, and the Matter setup process will also need to change. Shouldn't take more than another decade or two for both things to get accomplished, I suppose.)