[zamadatix]

Buying a device without "group policies, etc etc" doesn't mean you don't still need to implement them.

Damn I wish our company would stop buying Alexa/Home/Chromecast/Sonos/IoT-box-from-down-the-street.

[ChikkaChiChi]

One of the best ideas I ever had was getting a completely separate network connection for our guest WiFi. It was trivial to implement, keeps our diagrams and GRC needs simple, and we no longer have to worry when a PHB wants an IOT lightbulb that'll no doubt get hacked in 24 months.