I assume your rationale in blocking Android / Windows 10 devices is to only allow secure devices on your network. But if all the other devices are secure, then

I assume your rationale in blocking Android / Windows 10 devices is to only allow secure devices on your network. But if all the other devices are secure, then what is the harm in allowing an insecure device onto the network? I suppose they could become host an exit node or seed an illegal torrent or something, but you (personally) have indemnity as an impartial carrier in that case, right? I'd also suggest looking into a segregated guest network.