How can holiday shoppers be sure that the new connected device they’re eyeing was designed with protections against digital attacks?