Moving smart plugs, bulbs, TVs and cameras onto their own VLAN is the single biggest security win on a home network, and it is also the change most people roll back a week later because the cast button went grey and Home Assistant lost half its devices. The usual "fix" is an allow-any rule from IoT back into the house, which quietly undoes the whole point. This is the setup I use on OPNsense at home: an IoT zone with a three-rule firewall policy, plus the handful of narrow exceptions that kee...