Your solution has crossed my mind as well with recent attacks. Default Deny with restricted access paths whenever possible. Generally just doing things meant to be raising the bar for agents to get enough access so they can probe systems. Which unfortunately just sounds like leading us down a path of modernizing Security by Obscurity.

Internet facing devs will continue to have their constant war between defenders and attackers. Still a great deal of IOT stuff that has been connected under the need to "phone home" probably is going to be getting examined more closely. Companies who didn't think about security impacts are now getting forced to face why they needed their appliances connected to the Wi-Fi.