Because IoT devices have gigs of memory to hold said model and the processing power to run them, or even pieces of them. Sounds like more fear mongering to get regulatory capture. Not to mention, the models aren't doing squat until someone codes an agent telling them to do so...