Not sure, depends on your threat model and how you organized your LAN. I put my “trusted” devices in a special vlan and untrusted devices (IoT) in another one.

Not sure, depends on your threat model and how you organized your LAN. I put my “trusted” devices in a special vlan and untrusted devices (IoT) in another one. Only trusted devices can access IoT devices but not vice versa. Works pretty well. But yeah that does require a more advanced router / switch as well.