During the whole toothbrush botnet thing, people said ‘yes, the story is fake but it COULD happen’.
Almost every smart toothbrush uses Bluetooth so no, it could not.
Somebody pointed me towards one on Amazon which says it uses wi-fi, so I ordered it and investigated.
The toothbrush only has Bluetooth. The charger uses wi-fi - but has no open TCP or UDP ports. Traffic is outbound only, TLS 1.3.
So no, it was just total nonsense.