Piecing Together IoT Risk from Flexible & Fractured Design Components