Here is a link to the tool that video uses. This isn’t a case of someone compromising an existing smart bulb to do sketchy things, but rather someone installing this bulb covertly in your house and using it for penetration testing. the same could be accomplished by an arduino in the bushes or a guy with a white van out front.

Also most smart bulbs use zigbee or zwave not wifi. The hub could be hacked i guess, but I have mine setup to only be accessible on the local network.