So anyways, here's a somewhat memorable incident of people doing the thing you claim is impossible: https://en.wikipedia.org/wiki/ISeeYou

ISeeYou went well beyond turning off the light, it also came with arbitrary code execution: https://www.usenix.org/conference/usenixsecurity14/technical...