I think a lot of tech people like to exaggerate the security risks of IoT devices. While they may be "insecure", the worst thing that can happen is that someone may mess with your lights (super unlikely) or use your lights as part of a DDoS botnet (much more likely, but still rare). Most IoT things end up being quite safe since they connect out to some server, rather than allowing incoming connections, the main exception being some WiFi cameras. In fact, IoT hardware ends up being safer than routers overall.