ZigBee, Z-wave and Thread have virtually 0 attack surface from an IoT perspective, and even then what are they gonna do, do radio hacking to turn off and on my lights? It's not like they can be used in a botnet.
Locks is a bit more risky as an endeavor, but again, it's probably easier to pick the lock than hack it... Actually with the quality of many smart locks, smashing them is easier still.

Smart TVs are way more problematic devices for example, as soon as they stop receiving updates, you have a bunch of high-speed internet connected devices with unresolved exploits just sitting there waiting for the right chance.

[–] IAMgROOT@lemmy.wtf -1 points 1 month ago

ive used smart light bulbs in a botnet before. and if you do a teardown on one of those locks you can probably get the firmware and uart to get the unlock function which you could use theoretically to unlock every single one