Hue has a local API, you can firewall them if you want and HA will still be able to talk to them over the LAN. You can also get a Zigbee dongle and control the bulbs directly if you want, Hue bulbs are Zigbee compliant.