The bill for some lights is insignificant provided the thing is on a timer.
Maybe they had abuse from flyers-by. In that case, use the SMS solution, and register only specific caller numbers to operate it. Faking a caller ID on GSM is virtually impossible.