The big question is at which level this auth is enforced:
- official Hue apps - who cares
- hue bridge - bad, would break apps like HuePro and would force more complicated setup for some
- bulb - unlikely, that would mean everyone buying this for IoT lighting can throw out their whole set