Should the U.S. require minimum cybersecurity standards for smart devices?