> Yes, I could restrict them from accessing the internet, put them behind a VLAN or VPN etc., but it's a hassle Even if you find goldilocks IoT devices with co

> Yes, I could restrict them from accessing the internet, put them behind a VLAN or VPN etc., but it's a hassle Even if you find goldilocks IoT devices with completely open hardware/firmware/software and no backdoors, if they’re accessible from the internet, you’re still on the hook for maintaining their security forever. To me, monitoring and patching vulnerabilities for a bunch of different IoT devices is a _much_ bigger hassle than setting up a few VLANs. So if you’re going to isolate the devices regardless, you shouldn’t really care if they’re running firmware written in China with a bunch of backdoors.