[O2F2]

In my very personal opinion, anyone who willingly decorates their home with networked IoT devices, especially those talking to a external service, has already lost. With the increasing number of gizmos it's more or less inevitable that one of them (or rather all of them) ships with a gross, easy to exploit (an definitely wormable, because you know it'll be) oversight compromising your network because you're one of a million people getting owned by a bored skid. You want less timeboms in your home, not more. It's silly. Scale back, stop trying to mitigate around it and just don't buy this crap. You wouldn't keep a hand grenade with a toothpick for a safety pin on your desk because it'll be fine as long as everyone is really careful with it. But like I said, that's just the very angry voice in my head shouting into the void.

[shittyadmin]

Isolation is key if you use any device like this. Separate VLAN for them means stuff like this won't even work and even if they get hacked, they'll have no special access into your network.