The fact that they use ESP-NOW means they can be controlled (theoretically) by any ESP* that has ESP-NOW support. So far, folks have only managed to go the other way—to intercept remote key presses [0]—but I imagine it won’t be long before they suss out control of the bulbs.