Electric Imp seems like a great solution (flash setup data from a smartphone to a light receiver on the device) but I wonder how they handle imposters. For example they brag about a connected door lock. If I was a bad guy I would go to the nearest window, and shine a bright light with the setup pattern through it hopefully reconfiguring the lock.

If they make it too hard to reconfigure the lock then it will increase the support load.