I wouldn't say they aren't savvy. Many aren't, but also I don't blame them. Often you can buy a perfectly reasonable device and then they ad spying and adverts after you bought it. Most reviewers also don't talk about this stuff, and there are no standards for any of it (unlike e.g. energy consumption).
I went with Philips Hue smart lighting specifically because it could work without an account or any internet access for the bulbs or hub.
Guess what became required this year? At least it seems I can still use them offline if I don't use the official app. But the official app is now just a popup requiring me to create an account. I'm not sure if I could add new lights using third party apps. Not like I'm ever buying a Hue product again though.
I agree more legislation is required.