One thing I like about Z-Wave and Zigbee devices is that they can't connect to the internet no matter what, because they don't have the hardware for it.

• This means you don't need to worry about them phoning home with usage data. (privacy)
• It means you don't need to worry about them being used by a hacker to penetrate your network. (security)
• It means you don't need to worry about them being a node in some botnet mining crypto for someone else with your electricity. (resource usage)

You've already got HomeAssistant to connect them to your Google Home or HomeKit account, so you can still turn on your closet light from the bar or whatever. You're not losing anything by them not being connected to the internet directly. You just never have to worry about that stuff. Instead of having to keep 40 devices that were sold by some company that no longer exists up to date on their firmware, you just need to keep HA up to date.

All it costs is one $30 usb dongle.