I have been doing "IoT" for 10 years and after checking the website and the github repo I still have no clue about what flogo does. Isn't it like some basic http api for "triggers"? Is this what people think IoT is about? More importantly, can these basic set ups make money for some?
Agreed. It also doesn't solve the biggest it challenge which is giving each thing a unique identity and a means to prove its identity. I find that real-time event processing had been solved already through dataflow and Apache Beam. Along with generic pub sub systems.
IoT devices identifying themselves (authentication) is only a tiny sliver of the security picture. You also need to worry about authorization, encryption, and (security) monitoring.
One really annoying security problem with IoT devices right now is SSL/TLS's complete fundamental incompatibility with the concept of "roaming". Want to connect to your device via SSL/TLS? Better get used to ignoring warnings about the certificate name not matching the device's IP/hostname.