Yeah, I don't find it particularly compelling.
To me the most compelling vector is actually selling compromised smart bulbs online that phone home and do more malicious stuff. In which case, the internal security of the device is irrelevant.
Re:Pwn the LIFX Mini white
by general8bitso on Wednesday January 30, 2019 @08:12AM
(#19034726)
This would be trivial with Amazon comingling inventory.
That’s a pretty far fetched social engineering scheme if you ask me.