They're exaggerating to say that these hacks are real. They certainly aren't real in the way they portray them in the game, by just pointing at something and knowing instantly what can be hacked on the device and then pressing a single button to actually do the hack.
But even without that, most of the "real life" versions of these hacks aren't nearly so useful as in the game.
The game even invented fake operating systems and security systems so that they could have what the game needed to be able to hack them. And they were all internet connected, of course. Unlike real security systems. (I'll grant that a lot of home security systems are on the internet, but corporate offices? No.)
I mean there is also the conceit that there is a black hat movement (e.g. dedsec) backing the main character composed of a few hundred people writing exploits, etc. Which is of course a bit of superhero-esque fiction. But the point is if Anonymous was organized and a bit more radicalized, it would be possible to write hacks like this.
For example if instead of presenting at conferences the exploit writers shared them with other people who weaponized them and hooked them up to a proprietary toolkit to act at the push of a button. Supported by a team of people who managed an OS that provided these features. Supported by a team of people who managed and maintained exploits into various networks.
In the game dedsec is a terrorist organization, with hundreds of cells, all cooperating and sharing exploits, source code, 3d printing designs, botnets, etc. internally. There are missions where you build a new tool for their OS by working with multiple cells. Getting the prototype code, testing it, giving it to a another cell to integrate, and then having it.
The point is with devoted manpower of that degree, and with common purpose, this could actually happen, even if it's super unlikely, like many non-magical superhero movies.
Conceptually, any sufficiently motivated and well funded organization could do already be doing this. Whether that's nation state actors, organized crime syndicates, model railway enthusiasts, etc.
I wouldn't be so quick to offer that conclusion. I've been to several "corporate/fortune 150+" and "commercial/satellite" offices that use "cloud-based" physical security products.
You actually do manage the users and credentials (and everything else) through the vendors website. The security system also periodically connects to the same website and downloads any updates that it needs to apply to itself.
The building engineers and physical security guys are typically not educated/savvy enough to know to avoid these systems, so they _do_ get installed in many surprising places.
But even without that, most of the "real life" versions of these hacks aren't nearly so useful as in the game.
The game even invented fake operating systems and security systems so that they could have what the game needed to be able to hack them. And they were all internet connected, of course. Unlike real security systems. (I'll grant that a lot of home security systems are on the internet, but corporate offices? No.)