[sgarland]

I have all IoT devices in a VLAN, with a traffic rule that they can’t respond to any external requests unless they initiated it.

Good enough for me, but everyone’s level of comfort is different.