To be sure you have security holes sponsored by a gov at home …
Just another IOT device.
The only secure device is one that is turned off and locked someplace that can never be accessed again.but the most insecure one runs a non open source software made in china.
I understand you, now many device is online. If I just want to remotely control my own LED lights, I don’t think anyone would be motivated to spend a lot of time and resources trying to hack into it.