[omegalulw]

I think you can encrypt ethernet comms too using 802.1x RADIUS. That's as secure as Wi-Fi and removes the need for an isolated network (which, when unencrypted isn't as secure as you think, e.g. MiTM). Ideally you connect via both but that's overkill for most use cases.

[da768]

802.1x only authenticates devices, there's no encryption whatsoever past that point. You'd need MACsec or a VPN connection to prevent tapping.