I’m a residential electrical integrator. I only do homes, no commercial or industrial. I’ve been doing electrical, lighting systems, networks, and audio/video in homes for 20 years. Prior to that, I was been in IT for 20 years, as a private consultant for the last 10. I have a small customer base, with long-time relationships.
I have found open source solutions to be more reliable and better supported than propitiatory solutions. Ubiquiti was hacked, by an insider. I use the Ubiquiti controller add-on in Home Assistant and so none of my customers were exposed. It is also important that my solutions still work when the Internet connection is down.
I use Home Assistant in most of my solutions, because it can be
simple, stable, and secure.
I only use the basic, built-in integrations and add-ons. No crazy, beta-state stuff. I also only use simple, and few, automatons (schedules, timers, and lighting scenes). I put it on an ODROID, or Pi.
Most of my customers don’t know what Home Assistant is. They are not interested in making and changes, adding, etc.
I have installations where the customer never directly accesses the server. Keypads, dimmers, and motion sensors (INSTEON or Zooz with z-wave associations) are all they see. No Zigbee, Matter, wi-fi, etc.
I build simple screens, sometimes with instructions. I have complete control of what the customer sees. No logos, no “new product being pushed by the manufacturer”, just the netcam view of the porch, and a button to unlock the door. Done. The screen won’t change, buttons won’t move, no ads, etc. Simple, stable, and secure
I do have a couple of home assistant hobbyist customers. For them, I have clearly defined boundaries in my contracts. I will install X, Y, and Z, it will do A, B, and C. If they can mess with it, there is no warranty. If they install the wine cellar add on, great. But, I’m not supporting it.
Back to the original question: I steer people to Nabu Casa if the system I’ve built uses the app or they use web access. I tell them about the foundation and how great it is. If they are never going to access the server directly, I’ll use DDNS and forward a port for remote diagnostics.
Cheers!