> “Up until this point, the mechanism we’ve used to identify who is the owner of the Hue system and can do this [control your bridge], is by physical access to

> “Up until this point, the mechanism we’ve used to identify who is the owner of the Hue system and can do this [control your bridge], is by physical access to the device — and pressing the button on the bridge,” says Yianni. “This approach is inadequate going forward, and we need a more robust way to identify the owner of the system and enable them to manage their system — the Hue account is how we will do this.” So instead of needing physical access to compromise the device, now anyone with an internet connection across the world is a potential attacker? This improves security, how? Come on, who are you kidding? You're duping users into setting up accounts so you can suck up all that sweet, juicy data they have.