[RBW in PA]

Most IOT devices do not require a password to connect to your router

This is an interesting statement if correct. I do not own any IOT devices and frankly do not want them. However, I just looked at the setup instructions for the Echo Dot. It's done through a phone app and says nothing about entering a password. I'm wondering if the app somehow passes your router password used on your phone to the device? Perhaps via a blue tooth connection. If there is a way around wifi router passwords, you could connect to anyone's network and that don't sound right.

[nevadapatriot]

Yeah, it’s all magic. Most likely it’s the app you run on your phone like you said that is allowing the devices to sneak through the defenses and set up camp. Apps are always sneaky, always spying on you. The choice is always ours of course, to allow or not allow.