If you suspect your IoT device to be insecure, just copy any random Java update to it. Most likely it won't help anything, but hey, Oracle runs a complete business model based on that.
@DrOps java updates used to waste a lot of my time at various clients. Then I realized that no one actually NEEDED java. Just came pre-installed on all the commodity windows boxes.
Well, hardly anyone. One desktop at one place. Oh, and one receptionist 'needed' it for pogo.com I invited her to take it up with her boss ;-) Uninstalling java everywhere is the ultimate java update. Write once, runs nowhere perfectly after that.