The fact that they use ESP-NOW means they can be controlled (theoretically) by any ESP* that has ESP-NOW support. So far, folks have only managed to go the other way—to intercept remote key presses [0]—but I imagine it won’t be long before they suss out control of the bulbs.
The default is "Warm white, full brightness", probably mostly to avoid confused people sending back bulbs because they flipped the switch ON and the bulb remained dark. Since traditionally that meant a failed bulb.