Third law of IoT could be "Absolute security is an absolute myth", aka "we can only raise the bar of security, but never be able to stop someone jumping over the bar". On the contrary it just means we should be keep raising the bar of security.