Don't let it use the manufacturer's cloud service, but use your own local server (like Home Assistant) accessible only through VPN (Wireguard, Tailscale), keep your home router up to date. This alone eliminates the largest attack surfaces and offers way more privacy.