One option is to use per-device WiFi credentials (i.e. RADIUS auth). You still need to invalidate the credentials when you throw away a bulb, but there are adva

One option is to use per-device WiFi credentials (i.e. RADIUS auth). You still need to invalidate the credentials when you throw away a bulb, but there are advantages: 1. Unlike "wipe the bulb before discarding", you don't have to trust the bulb manufacturer to actually wipe. 2. You can invalidate credentials even after discarding a bulb.