The biggest risks to my home network are my kid's friends. They bring their gaming laptops over and connect to the house network. No telling what is going on wi

The biggest risks to my home network are my kid's friends. They bring their gaming laptops over and connect to the house network. No telling what is going on within my perimeter! I used to run several internal networks, each with their own static external IP addresses, all mediated by pf on OpenBSD. There was a network for the kids, one for my wife and a couple for me. That was so much work and my wife always teased me that my machines always had better quality of service so I've gotten lazy and don't enforce security in the internal networks like I should--I'm even thinking about putting in a Ring doorbell.