[PhilipRoman]

For all its faults, the term "zero trust" applies here - treat your local network as untrusted.

Historically the security of Ethernet, IEEE802.11 and other such protocols has been full of half measures, laughably weak crypto and whatever WPS is supposed to be. Look at the history of wireless security if you want to have a good laugh.

In the application layer, on the other hand, we have rock solid solutions like SSH which remain the gold standard for security.

[rendaw]

That sounds like an ideal more than a reality. Windows has separate "Home network" firewall settings that it automatically detects, and I assume lots of other consumer devices make similar assumptions.

Yeah you can lock everything down, _if_ you're careful, _if_ you don't mess up, _if_ some consumer hardware doesn't have a vulnerability