I get it if you're happy with a light attached to an old fashioned switch. But you can do so much more with smart bulbs, and it's easy (for me at least) to see why folk want them. The ability to change color to set a mood, the ability to turn on interior lights when you unlock your front door, having lights come on 30 minutes before sunset and turn off shortly after sunrise, and so on.
Of course if something is networked, there are bound to be patches. It's part of the territory.
What I'm less sure about is the summary. It says you need to patch your bulbs, but implies the hub will update itself if it's connected to the internet. So it looks like the only thing needed is to have an internet connected hub and have your bulbs turned on. That's as it should be.
Now, where I'm concerned is with third party bulbs. What if you're using an Ikea bulb on a Hue hub? Is it vulnerable? If so, will it be updated?