I do have access from my trusted network to the untrusted one, but not the other way around (ACL's on my switch prevent the untrusted VLAN from accessing anythi

I do have access from my trusted network to the untrusted one, but not the other way around (ACL's on my switch prevent the untrusted VLAN from accessing anything but my pfSense router for internet access). Regardless of this, however, they are separate broadcast domains, so if I can't just punch in an IP address to access it I won't be able to use it (and this excludes a lot of proprietary "Smart" devices that rely on mDNS+DNS-SD or TCP/UDP broadcast for discovery without any option for direct IP connection). If I ever bought into the "Connected" / "Smart" home (and I probably will, it would be really nice to open my garage from my phone and have lights automatically turn on, monitor the thermostat remotely, etc) I will probably invest in standards-compliant devices that use Zigbee or Z-Wave and setup OpenHAB - all of these proprietary "Smart" devices just seem dumb when you have to rely on external services like IFTTT to integrate them, really defeats the whole purpose and I don't like being locked into specific brands / ecosystems when semi-open standards exist.