> Even assuming the protocol is secure
The other fun thing about them is because they talk Wi-Fi frequencies, if you break into them they can also be reprogrammed to act like a hotspot, or start commanding _other_ devices.
So if you send a drone up the side of an office building to the executives floor, and can break into one lightbulb wirelessly, you can then make that lightbulb break into all the other lightbulbs, until you reach the secluded inner rooms, and you can make that lightbulb listen for Wi-Fi traffic and can pretend to be a hotspot for the targetted executive's laptop. Like in the movies!
https://www.researchgate.net/publication/322969640_IoT_Goes_...