The end of easily flashable Tuya devices was what prompted me to migrate to Zigbee too. The few devices that require cloud connection are blacklisted from any other network access.
But it is also a benefit that Zigbee can operate independently from the controller. If HA goes down for whatever reason and automation with it, at least light switches and whatnot are still working as usual.