Civil Code 1798.91.04(a): A manufacturer of a connected device shall equip the device with a reasonable security feature or features that are (1) appropriate to the nature and function of the device, (2) appropriate to the information it may collect, contain, or transmit, and (3) designed to protect the device and any information contained therein from unauthorized access, destruction, use, modification, or disclosure.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.