What is a reason IoT devices are more susceptible to command-and-control (C2) attacks?

IoT devices often have constant internet connectivity and increased data sharing, making them more vulnerable to command-and-control (C2) attacks. Their limited security features and exposure to external networks provide attackers more opportunities to compromise and control them remotely.