[iszomer]

I keep them in a separate vlan with outbound internet enabled but firewalled from my main network and am still building a ruleset for blocking all *.cn and china-based ipv4 addr blocks. One interesting tidbit during the aws-east-1 downtime was that tapo remote viewing was inaccessible while wyze was okay.