The right way to do this is set up a VLAN that can't get out to the Internet and is segregated from your own devices except via inbound connections from a Firew

The right way to do this is set up a VLAN that can't get out to the Internet and is segregated from your own devices except via inbound connections from a Firewall. I've done this with cheap Chinese IP Cams and much other IOT garbage that has either been reverse engineered and/or presents some form of local network access.