I don’t disagree on the current state. However, it’s not hard to foresee that attack tools will be developed that can maintain “attention” on an attack for days or weeks at a time with privately run agents. I’m sure they are out there already to some degree.

Cyber security in general is going to get interesting. Breaking into protected systems often requires more patience than expertise. Attackers often get detected when they take short cuts because of laziness and overconfidence. AI agents have unfathomable patience and attention to detail.l

It depends on the rest of your setup, but I recommend going with zigbee or matter/thread for the connectivity. I definitely wouldn’t put any “smart” devices on my general purpose wifi. That stuff is never going to be secure. Also, consider if smart switches would work for you instead. That way you don’t have to pay the premium when a bulb burns out.