A thumb drive would be even harder but more obvious in its purpose. The bulb is good because it hides in plain sight. But it requires being within sight to be meaningful. But once it is it’ll be broadcasting its existence over standard protocols.

I guess the key is to disguise it further by making it entirely like normal. I’d perhaps give the SSID two passwords. One which is the normal configuration password and the other enables the port for your connection.